{"id":22796,"date":"2023-08-29T09:20:54","date_gmt":"2023-08-29T17:20:54","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2023\/08\/29\/news-16526\/"},"modified":"2023-08-29T09:20:54","modified_gmt":"2023-08-29T17:20:54","slug":"news-16526","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2023\/08\/29\/news-16526\/","title":{"rendered":"Generative AI policy enforcement with Sophos Firewall"},"content":{"rendered":"<p><strong>Credit to Author: Chris McCormack| Date: Tue, 29 Aug 2023 16:23:51 +0000<\/strong><\/p>\n<div class=\"entry-content lg:prose-lg mx-auto prose max-w-4xl\">\n<p>The Sophos X-Ops team, in partnership with the Sophos Firewall product team, is pleased to announce a new application signature pack for Generative AI that has been released for all supported Sophos Firewall versions via a pattern update.<\/p>\n<p>Generative AI has been the subject of considerable buzz recently, and for good reasons. It represents both an enormous opportunity to accelerate or augment workflows as well as a significant threat if abused.<\/p>\n<p>While some organizations have fully embraced Generative AI, many organizations are still exploring the applications for it and evolving their policies for use, and some have outright prohibited it.<\/p>\n<p>Generative AI has proven extremely valuable in several creative and innovative use cases:<\/p>\n<ul>\n<li>Data analysis including trending, benchmarking, modeling, budgeting, and forecasting<\/li>\n<li>Recruitment, on-boarding, training, and employee development<\/li>\n<li>Content summarization and creation for emails, documents, KB articles, social media, and more<\/li>\n<\/ul>\n<p>Generative AI has also raised legitimate concerns and risks related to trust, data protection, privacy, and intellectual property protection that has many organizations wishing to block access to Generative AI or at least monitor its use.<\/p>\n<p>Sophos has recognized the growing requirements of many organizations to establish Generative AI policies and enforce them. By adding Generative AI app signatures to Sophos Firewall&#8217;s in-line CASB and application control capabilities, we are giving organizations full control over which Generative AI solutions they can block, accelerate, or simply monitor.<\/p>\n<h2>Generative AI policy controls with Sophos Firewall<\/h2>\n<p>Sophos Firewall offers important features for easily monitoring and controlling cloud application usage with its in-line Cloud Access Security Broker (CASB) capabilities, which are highlighted on the Sophos Firewall Control Center. This offers a quick, at-a-glance solution to gain visibility into cloud applications &#8211; and now Generative AI usage &#8211; to identify and control shadow-IT usage and potential data loss vectors.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-93445 size-full\" src=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Control-Center.png\" alt=\"\" width=\"1430\" height=\"776\" srcset=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Control-Center.png 1430w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Control-Center.png?resize=300,163 300w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Control-Center.png?resize=768,417 768w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Control-Center.png?resize=1024,556 1024w\" sizes=\"auto, (max-width: 1430px) 100vw, 1430px\" \/><\/p>\n<p>You can easily drill-down to see which specific cloud applications are being accessed on your network that are new, sanctioned, unsanctioned, or tolerated, and build policies to either accelerate, block, or shape this traffic. Generative AI application usage is listed alongside other cloud applications with full traffic volume and user details, providing quick insights and easy classification options:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-93446 size-full\" src=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Apps.png\" alt=\"\" width=\"1310\" height=\"510\" srcset=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Apps.png 1310w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Apps.png?resize=300,117 300w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Apps.png?resize=768,299 768w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Apps.png?resize=1024,399 1024w\" sizes=\"auto, (max-width: 1310px) 100vw, 1310px\" \/><\/p>\n<p>Insights are also available in both the on-box and Sophos Central reporting as well as the firewall log viewer:<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-93447 size-full\" src=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Log-Viewer.png\" alt=\"\" width=\"1312\" height=\"1062\" srcset=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Log-Viewer.png 1312w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Log-Viewer.png?resize=300,243 300w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Log-Viewer.png?resize=768,622 768w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Log-Viewer.png?resize=1024,829 1024w\" sizes=\"auto, (max-width: 1312px) 100vw, 1312px\" \/><\/p>\n<p>You can use the new Generative AI application signatures to easily add application control rules to enforce your desired policies:<\/p>\n<p><img decoding=\"async\" loading=\"lazy\" class=\"aligncenter wp-image-93448 size-full\" src=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Policies.png\" alt=\"\" width=\"1302\" height=\"762\" srcset=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Policies.png 1302w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Policies.png?resize=300,176 300w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Policies.png?resize=768,449 768w, https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/Policies.png?resize=1024,599 1024w\" sizes=\"auto, (max-width: 1302px) 100vw, 1302px\" \/><\/p>\n<h2>How the signature pack is rolling out<\/h2>\n<p>The new Generative AI signature pack is being automatically deployed as a series of pattern updates to all <a href=\"https:\/\/support.sophos.com\/support\/s\/article\/KB-000035279?language=en_US#xgfirewallsoftware\">supported Sophos Firewall versions<\/a>\u00a0over the next few weeks.<\/p>\n<p>The first signatures are provided in an update Tuesday, August 29<sup>th<\/sup>, with new signatures added each week over the following three weeks until all signatures have been deployed by September 19<sup>th<\/sup>.<\/p>\n<p>Your firewall device will require either our Web Protection subscription or Xstream Protection bundle (which includes Web Protection) to utilize the application control and CASB cloud application capabilities.<\/p>\n<p>You can check that you have received the new Generative AI signature update by navigating to \u201cBackup &amp; firmware &gt; Pattern updates\u201d and checking that the current version of IPS and Application signatures is version 18.20.86 or later.<\/p>\n<h2>Documentation<\/h2>\n<p>To take advantage of the new Generative AI signatures and block, accelerate, and\/or route these applications, consult the product documentation:<\/p>\n<ul>\n<li><a href=\"https:\/\/doc.sophos.com\/nsg\/sophos-firewall\/19.5\/help\/en-us\/webhelp\/onlinehelp\/AdministratorHelp\/Applications\/index.html\">Sophos Firewall Application Control Documentation and How-to Articles<\/a><\/li>\n<li><a href=\"https:\/\/doc.sophos.com\/nsg\/sophos-firewall\/19.5\/help\/en-us\/webhelp\/onlinehelp\/AdministratorHelp\/Routing\/SDWANRoutes\/RoutingSDWANRoutesUserApplication\/index.html\">Sophos Firewall SD-WAN Application Routing<\/a><\/li>\n<\/ul>\n<p><strong>Important note:<\/strong> Prior to this release, OpenAI detection was provided by a signature that was part of the \u201cGeneral Internet\u201d application category. This application signature has now moved to the \u201cGenerative AI\u201d category. As a result, any application control policies you previously had related to this application signature may need to be updated.<\/p>\n<p><strong>Also note<\/strong>: The generative AI category and applications are not supported initially in Central Management group policies. This will follow soon.<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/news.sophos.com\/en-us\/2023\/08\/29\/generative-ai-policy-enforcement-with-sophos-firewall\/\" target=\"bwo\" >http:\/\/feeds.feedburner.com\/sophos\/dgdY<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/news.sophos.com\/wp-content\/uploads\/2023\/08\/AI-Hero.png\"\/><\/p>\n<p><strong>Credit to Author: Chris McCormack| Date: Tue, 29 Aug 2023 16:23:51 +0000<\/strong><\/p>\n<p>Full control over which Generative AI solutions to block, accelerate, or simply monitor.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10377],"tags":[12235,10384,24562,24567],"class_list":["post-22796","post","type-post","status-publish","format-standard","hentry","category-security","category-sophos","tag-firewall","tag-network","tag-products-services","tag-sophos-firewall"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/22796","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=22796"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/22796\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=22796"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=22796"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=22796"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}