Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Libor_Kovar
Contributor
Jump to solution

Blocking Deepseek Access

Hello, I am using CP UTM1 v 80.40.

 

Advise, pls:

We are now obliged by goverment to block access to Deepseek AI.  How to do that ?

We are using IPS, AntiBot , Application Control . (Geoplicy, too)

No Https inspection in place. Can I set it up just involving Deep seek webs ?

 

Many thanks

 

 

0 Kudos
3 Solutions

Accepted Solutions
the_rock
MVP Gold
MVP Gold

I would just add custom app object and include *deepseek* in it. I attached a screenshot of what I meant. I cant guarantee it will work if you dont have inspection enabled, but worth a try. My bad, I typed *deepsake* in the screenshot, but I meant *deepseek*

Andy

 

View solution in original post

0 Kudos
Tal_Paz-Fridman
Employee
Employee

Why not use the predefined DeepSeek Application?

DeepSeek.png

View solution in original post

(1)
Chris_Atkinson
Employee Employee
Employee

Is the DoH application also missing for you per sk165873?

CCSM R77/R80/ELITE

View solution in original post

(1)
19 Replies
Chris_Atkinson
Employee Employee
Employee

Please upgrade to a supported version and enable SSL inspection for best results.

CCSM R77/R80/ELITE
0 Kudos
the_rock
MVP Gold
MVP Gold

I would just add custom app object and include *deepseek* in it. I attached a screenshot of what I meant. I cant guarantee it will work if you dont have inspection enabled, but worth a try. My bad, I typed *deepsake* in the screenshot, but I meant *deepseek*

Andy

 

0 Kudos
Tal_Paz-Fridman
Employee
Employee

Why not use the predefined DeepSeek Application?

DeepSeek.png

(1)
the_rock
MVP Gold
MVP Gold

I definitely missed it before, was looking for it : - )

Andy

0 Kudos
Tal_Paz-Fridman
Employee
Employee

Hi Andy,

Make you have the lastest database update.

Thanks

Tal

0 Kudos
the_rock
MVP Gold
MVP Gold

Hey Tal,

Yes, definitely do, just missed it when I searched for it.

Andy

0 Kudos
Libor_Kovar
Contributor

I am not seeing it either.  How to force the Db update on 80.40 ? My version is from 22.6.2024 😞 despite I use scheduled update

0 Kudos
the_rock
MVP Gold
MVP Gold

I would upgrade to R81.20 if you can, since R80.40 is not supported.

Andy

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Is your JHF & SmartConsole at least the latest for the version and have an active license & support contacts?

 

CCSM R77/R80/ELITE
0 Kudos
Libor_Kovar
Contributor

Hi, thanks for all replies.

yes, I have valid contracts.

Smart Console is R80.40 994000435

mgmt and GW are R80.40 JHF Take 211

I am not allowed by our IT mgmt to install the new main version .

I understand, that I have unsupported version of MGMT and GW engines as themselves , but expected, that updating the protections of all kind should work, as we pay subscriptions.

IPS and other threat signatures are up-to-date.

How come, that APP control & URLFiltering has creation date as of 22.9.2024 . I setup scheduled updates , but even I do it manually, it silently brings nothing? Thus, that Deepseek signature is missing

 

 

 

 

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Is the DoH application also missing for you per sk165873?

CCSM R77/R80/ELITE
(1)
Libor_Kovar
Contributor

You're the best !!  sk165873 helpe to update DB and get DoH and Deepseek !!! 

sk165873 - User fails to find DNS over HTTPS (DoH) application in SmartConsole

There is a script to run and fix it

Many thanks you all !

 

 

the_rock
MVP Gold
MVP Gold

Good sk, never knew of it before, amazing! Glad we can help bro, @Chris_Atkinson is great!

Andy

0 Kudos
the_rock
MVP Gold
MVP Gold

From my lab.

Andy

 

[Expert@CP-FW-01:0]# more appi_status.C
(
:status (0)
:status_short_desc ()
:status_long_desc ()
:app_update_status (new)
:app_update_description ("Gateway was updated with database version: 60
72501.")
:app_next_update_description ("The next update will be run as scheduled
.")
:app_db_version (6072501)
:urlf_status_code (0)
:urlf_status_short_description ()
:urlf_status_long_description ()
:appi_rad_status_code (0)
:appi_rad_status_description ("Application Control Engine is up and run
ning")
:urlf_rad_status_code (0)
:urlf_rad_status_description ("URL Filtering engine is up and running")
:app_subscription_expiration_date ("Wed Jul 30 19:12:15 2025")
:app_subscription_status (valid)
:app_subscription_description ("Contract is up to date.")
:urlf_subscription_expiration_date ("Wed Jul 30 19:12:15 2025")
:urlf_subscription_status (valid)
:urlf_subscription_description ("Contract is up to date.")
)
[Expert@CP-FW-01:0]#
[Expert@CP-FW-01:0]#
[Expert@CP-FW-01:0]#
[Expert@CP-FW-01:0]#
[Expert@CP-FW-01:0]#
[Expert@CP-FW-01:0]#
[Expert@CP-FW-01:0]# pwd
/opt/CPsuite-R81.20/fw1/appi/update
[Expert@CP-FW-01:0]#

0 Kudos
Libor_Kovar
Contributor

Hi, thanks.

Strange , this all I found:

 

pwd
/opt/CPsuite-R80.40/fw1/appi/update

[Expert@utm1:0]# more appi_status.C
(
:status (0)
:status_short_desc ()
:status_long_desc ()
:app_update_status (up-to-date)
:app_update_description ("Gateway is up to date. Database version: 2072501.")
:app_next_update_description ("The next update will be run as scheduled.")
:app_db_version (2072501)
:urlf_status_code (0)
:urlf_status_short_description ()
:urlf_status_long_description ()
:urlf_subscription_status ()
:urlf_subscription_expiration_date ()
:urlf_subscription_description ()
:appi_rad_status_code (0)
:appi_rad_status_description ("Application Control Engine is up and running")
:urlf_rad_status_code (0)
:urlf_rad_status_description ()
:app_subscription_expiration_date ("Sun Mar 1 00:00:00 2026")
:app_subscription_status (valid)
:app_subscription_description ("Contract is up to date.")
)

0 Kudos
the_rock
MVP Gold
MVP Gold

I only have R82 to check atm and it shows different. Not sure if thats right one for R80.40, but it does show up to date.

Andy

0 Kudos
Libor_Kovar
Contributor

Hello, thank you. It's on my plane. In the mean time, I set this rule up on our endpoint protection policy (TM Apex One).

I mean , that if I do it, like inserting https: to these links, I don't need the https inspection, for now, until I will have the app signature.

0 Kudos
the_rock
MVP Gold
MVP Gold

I recall once when I had an issue where AI category was not showing, when I updated smart console gui, all worked fine.

Andy

0 Kudos
the_rock
MVP Gold
MVP Gold

@Libor_Kovar Hope it helped?

Andy

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events