GenAI Security From Check Point September 2024: Vi...

PhoneBoy · ‎2024-09-04

Slides are posted below the video, which is below the Q&A.

Do we know yet what other Check Point products we will need to utilize this new GenAI tool?

As part of the preview, the solution is included in the Harmony Browse with DLP package. It is also part of Harmony SaaS.

Is the information in the dashboard from data via the Harmony endpoint agent or is it from gateways?

The information comes from Harmony Browse (Harmony Endpoint's browser extension)

Is it possible to get this kind of GenAI Dashboard for onprem Managements as well?

At the moment this is not available. We are looking into enabling it in the future.

Can I block ChatGPT in Harmony SaaS?

That can be done entirely, but it can also be done based on the data shared (as demonstrated).

I'm curious how AI makes a difference between real and fake sensitive information?

We use our own Large Language Model (LLM) to analyzes the prompt text, the LLM assesses the context, use case and business sensitivity of the text.

It turns out LLMs and GenAI can be very good at this - to get a *very basic* idea, just try in ChatGPT /Gemini/Copilot "Please assess the business sensitivity of the following message: <....>""

Any plan to have the Harmony Browse extension make a screen recording of detection events so that admin can see what the user was actually doing?

We are recording the prompts and will give admins access to that (with some flow to control that, to protect user privacy). Screen recording is an interesting idea, we will need to look into that, not sure if it is feasible technically for a browser extension.

Where do you check the text? If I copy paste to a text file and then copy and submit to GenAI?

It is checked on paste.

Are the block and detections done by Harmony Browse?

Yes

How can the plugin know if I paste to an intermediary like Notepad.exe?

The detection is done on paste, which means it doesn't matter where it is copied from, ultimately.

Does it support macOS as of now?

The supported platforms are the same as Harmony Browse. If you have the browser extension - you can get Gen AI Protect as well.

Are those functions available for other languages than English?

YesDoes this service work only for browser (Web Based) and not in an installed application?

At the moment only browser traffic is supported. In our roadmap, we plan to support installed apps as well, specifically AI based extensions like Visual Studio Copilot.

Would be great for Harmony Mobile too. A lot of schools provide tablets for students and this would be great during exams etc.

Interesting use case, thanks. We plan to integrate with Mobile as well, but that would probably be only late 2025.

Does it support the AI Copilot built into Windows?

At the moment only browser based AI services are supported. In the future, we plan to support installed apps and extensions as well.

What is the process to set up a preview?

https://pages.checkpoint.com/2024-genai-security-demo.html
https://pages.checkpoint.com/2024-genai-security-preview.html

Harmony Browse is disable when user use private browsing, DLP also works in private browsing, so when access to AI sites is also monitored/blocked?

The Gen AI Protect feature is only available when the browser extension is running. When it isn't running - we do not scan the interactions with AI services. However, you can force (through group policy) specific extensions to run, even in Incognito mode.