AI question

[the_rock]

Hey guys,

Had an interesting question from customer today. They asked me if CP has any plans to integrate AI copilot thats available for S1C in infinity portal, into regular smart console?

Tx as always!

[israelfds95]

Actually, starting from R81.20, the Infinity AI Copilot is already available and can be integrated directly into the SmartConsole. This allows administrators to use the Infinitty AI Copilot right from the on-premise management interface, not just via the Infinity Portal.

I’ve published a detailed article on CheckMates that walks through how to enable and test this feature in SmartConsole:
 AI Copilot: Threat or Ally for Security Professionals? How to enable and test in SmartConsole

For official documentation and step-by-step instructions, refer to the SecureKnowledge article:
 How to enable Infinity AI Copilot in SmartConsole (sk182844)

Hope this helps!

[the_rock]

Hey brother,

Yes, thats true...BUT, that does not sadly apply for onprem management. Im referring to say if someone was running management server as VM.

[israelfds95]

Just to make sure I understood correctly: you’re talking about an on-premise Security Management Server (SMS) running as a VM, not just cloud management, right?

If so, I’ve enabled the AI Copilot feature for customers with on-prem SMS setups (one single SMS and another SMS HA), both running as virtual machines on R81.20 and R82. In both cases, it was possible to integrate AI Copilot by following the steps in sk182844—but both environments need to have an Infinity Portal account.

[the_rock]

Thats right. Im referring to customers who have VM as management, but do NOT want to connect anything to infinity portal. So basically, onprem mgmt server with copilot AI, thats it. 

[israelfds95 · Accepted solution]

Ahh, now I get it, that would really be great! but from what I understand, there’s no integration without a connection to the Infinity Portal.

[the_rock]

I believe you are 100% right. That was also my impression, but wanted to confirm.

[Tomer_Noy]

It's just worth emphasizing that you can have a completely on prem management server, and still use the AI Copilot (and other services) from the Infinity Portal.

The Management can be on an appliance or VM. It can be in your local network, even behind NAT or FW.

All you need is an outbound https connection from your Management to the internet, and it can open a tunnel to our Infinity Portal. This will allow you to use the AI Copilot in your SmartConsole with your on-prem Management.

The prompts and computation will go to our cloud (just like ChatGPT or Claude), but you don't need to upload all your data to our cloud, or migrate your management to the cloud. Only the data that the AI needs for evaluating the question and reasoning the response will go to the cloud.

Even your logs can stay on-prem, as in latest JHF versions, we added new query capabilities for the copilot to get answers from your on-prem log servers.

That said, if you have an air-gapped environment or specific prohibitions from sharing any data with the cloud, then this will not be a good fit.

[the_rock]

Hey Tomer,

I have eveng mgmt in the lab, and though I allow any communication outbound, I dont see any option for ai copilot anywhere.

[PhoneBoy]

AI Copilot requires connectivity to Infinity Portal, even for on-premises management.
You can integrate your on-premise management with on-premise AI using MCP Servers we've developed.