Block Generative AI apps in all browsers

You can use DNS Protection for endpoints to block access to unauthorized Generative AI (Gen AI) applications from endpoint devices. To do this, turn on DNS Protection on endpoints, create a custom domain list for the Gen AI applications you want to block, and add the list to a DNS Protection policy. The policy blocks access to the Gen AI domains.

Turn on DNS Protection for endpoints

To turn on DNS Protection for endpoints, do as follows:

1. Go to My Products > DNS Protection > Policies.
2. Click Endpoint policies and open the Base Policy - Endpoint DNS Protection policy.
3. Click Settings.

4. Turn on Use Sophos DNS Protection.

   

5. Click Save.

Add a domain list for Gen AI apps

To add a domain list, do as follows:

1. Go to My Products > DNS Protection > Domain lists.
2. Click Add domain list.
3. Enter a name for the domain list.
4. In Domains, enter the domains or URLs for the Gen AI applications you want to block.
5. Click Save.

Add the domain list to a DNS Protection policy

To add a domain list to a policy, do as follows:

1. Go to My Products > DNS Protection > Policies, and click Filtering policies.
2. Open a DNS Protection policy that allows traffic and applies to the users or devices you want to manage.
3. Click Settings.
4. Under Filtering by domain lists, turn on Include domain lists when filtering.
5. Click Add list.
6. Select the domain list you created for the Gen AI applications.
7. Click Save.

8. For the list you added, under Actions, select Block.

   

9. Click Save.