AI Firewall 1.1.0.1
Moved most of the logic to the client part (js) having code injection to the original web site
Supports this AI Services: Copilot, ChatGPT, DeepSeek, Perplexity, Grok, Claud
Gemini - supported without a real block
AI21 - not supported anymore
In every product need to check that prompt, response and file are checked, audited and blocked if needed.
In every product need to check using anonymous, signing in with external method like google and signing in internally
Also, check what happens when the user removes the proxy
Check that the UI enhancement done by Hodaya works everywhere
In Copilot specifically, the references in the answer are shown like in the original Copilot interface
* Anonymous DeepSeek requires upgrade to Bastion
* Copilot has also option to run as plug-in to MS Office. In this case only auditing works with no blocking. Check it when it’s a part of Teams, Outlook, Word, Excel…
Dashboard 2.14.2.2 on is required for this version
Domain list for the PAC
"chatgpt.com",
"*.azureedge.net",
"augloop.office.com",
"gemini.google.com",
"m365.cloud.microsoft",
"claude.ai",
"*.ai21.com",
"www.perplexity.ai",
"grok.com",
"deep-seek.chat",
"chat.deepseek.com",
"pragatix.com",
"copilot.microsoft.com"
In order to upgrade from 1.0 to 1.1, you need to:
Replace dll and all the js files with the files from the package
Replace AI.pfx with the file from the package
Replace pac with the file from the package
Update host list in bastion.xml with the list that is in bastion.xml from the package
AI Firewall 1.1.1
Starting from this version , stream answer is supported in responses. What you have to do is these:
In bastion.xml for the specific account add this line
<bypass on="response" filter="false">Content-Type: text/event-stream</bypass>
The second thing that “Real-time firewall inspection scope“ for this account should not include “Response”