Zscaler AI Guard

Creating a Policy

After you have selected Zscaler AI Guard as your AI firewall provider:

Step 1: Select Mapped Probes

Only probes that meet the required criteria are shown, and their fail rates are displayed for reference.

Probes used in this step must:

• Have a completed probe run.

• Have mapped policy rules.

These criteria ensure that only relevant probes are included in the generated policy, keeping configurations accurate and efficient.

Figure 1: Select Mapped Probes

Generated Policy Template Page

Once the new policy has been generated, the Generated Policy Template Page displays the full details of the result.

The top section includes key policy information:

• AI Firewall Provider - AI firewall provider for which the policy was generated.

• Generated on - when the policy was generated.

• Generated by - who generated the policy.

• Imported on - when the policy template was created.

• Imported by - who triggered the policy generation the policy.

• Selected probes - probes used to create a template based on the results of their runs.

• Progress - showing whether the policy template is being generated or the generation is finished.

• State - showing whether the policy template is imported to the Zscaler AI Guard or not.

Below the summary of the latest generated policy, there is a detailed list of configured Input and Output Detector Rules. The Input Detector evaluates and flags potentially problematic user inputs, such as harmful or sensitive queries, while the Output Detector assesses model-generated responses to ensure compliance with predefined guidelines and organizational policies. Both detectors flag specific messages based on finely tuned rules, identifying content that might violate security or ethical standards.

To apply a policy template containing these rules, users can click the "Import" button in the top-right corner of a page. This will open the Zscaler AI Guard interface, where they can configure the AI firewall settings based on the loaded template. Once the configuration is complete, the policies will be enforced in real time.

Figure 2: Latest Generated Policy Template page for Zscaler AI Guard