Ask AI is a generative AI agent that helps you analyze events and account data using natural-language prompts. When you have analyzed the events, Ask AI can suggest an Internet Firewall rule and add it to the policy. This helps you move faster from investigation to policy creation without manually building the rule from scratch.
Ask AI creates the rule as an unpublished revision, and the rule is only enforced after you publish the policy.
Note: Advanced AI Assistant capabilities, including account-specific answers and creating Internet Firewall rules, are currently available as a free trial.
When you use Ask AI to create an Internet Firewall rule, it suggests the rule settings in the chat based on your prompt. After you approve the suggestion in the chat, the Ask AI agent adds the new rule to the Internet Firewall policy as part of an unpublished revision. By default, the new rule is added at the end of the policy to reduce the chance that it interferes with the existing rulebase. Until you publish the revision, there is no impact on traffic.
If you need to update settings in the suggested rule, click Reject and tell Ask AI what needs to be changed. When the rule is correct, click Approve, and the rule is added as an unpublished revision.
Before you publish the policy, review the generated rule and verify that it matches your intended action, scope, and placement.
Using Ask AI to create Internet Firewall rules is subject to the RBAC and role settings for admins.
To create a new rule with Ask AI, you must have permissions to edit the Internet Firewall policy or sub-policy.
If an admin only has view permissions, Ask AI can still provide information about the existing rules. It can't add a new rule to the policy or sub-policy.
If an admin does not have permissions for the policy or sub-policy, Ask AI can still suggest a new rule, but it does not provide information about the existing rules and cannot add the rule to the policy or sub-policy.
Use Ask AI to create a suggested Internet Firewall rule from a natural-language prompt. After Ask AI creates the rule, review the unpublished revision and then publish the policy to enforce the rule.
To create an Internet Firewall rule with Ask AI:
- From the navigation menu, click Home > AI Workspace. You can also use the Ask AI right-hand panel.
- Enter a natural-language prompt that describes the rule you want to create.
- Review the suggested rule details.
- If you need to update the rule, click Reject and tell Ask AI what it needs to change.
-
Click Approve.
The new rule is added as the lowest priority of the Internet Firewall policy.
- Open the Internet Firewall page and review the unpublished revision.
- Click Publish.
-
In the Publish Revision confirmation window, click Publish.
The Internet Firewall policy is updated with the new rule.
Changes made to an Internet Firewall rule with Ask AI are logged in the Audit Trail in the same way as rules that you create manually.
This functionality is also available through the Cato Remote MCP Server. You can use a connected MCP client to investigate policy behavior and generate an Internet Firewall rule suggestion.
Permissions for this functionality are controlled by the API key that the MCP client uses. To prevent users from creating or modifying rules, assign them a read-only API key that lets them investigate account data and policy information.
0 comments
Please sign in to leave a comment.