FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ggarg
Staff
Staff
Article Id 255020
Description This article describes how to block ChatGPT using an application signature.
Scope FortiGate.
Solution

Prerequisites:

  • The application control database has been updated recently (to make sure the signature is present).
  • A firewall policy in proxy-mode (as a general need for Application Control).
  • Deep-inspection is enabled.

 

Follow the instructions in Technical Tip: How To Upgrade Application Control Definitions Manually to check the version.

 

Next, navigate to Application Control under security profiles.

 

Create a new application and filter override:

 

Picture1.png

 

Search for the OpenAI signature.

 

Picture1.png

 

Select the signature and then choose the action (Block). Select Add Selected once done.

 

Picture1.png

 

After completing the steps above, use the application control on the policy. This will block the ChatGPT applications.

 

Picture1.png

 

To block browsing, create one static URL filter under the web filter to block the Chat GPT wildcard, and use the same web filter on the policy as mentioned above.

 

Picture1.png

 

The following is the result when a user attempts to access OpenAI applications:

 

Picture1.png

 

If the requirement is to block other AI-related tools aside from ChatGPT, starting FortiOS version 7.4.1, a new FortiGuard web filter category is added for AI. The new category Artificial Intelligence Technology is added as a sub-category under General Interest - Business.

 

block-ai.PNG

 

The GenAI category is also added to the application control categories. 

 

app-ai.PNG

 

If the GenAI category is not available, check the application control signature database if running the updated version. Run the command below to check the database version:

 

diagnose autoupdate versions | grep "Application Definitions" -A 6

 

Related document:

Add FortiGuard web filter categories for AI and cryptocurrency