Xcitium Secure Internet Gateway

• Secure Internet Gateway
  • Setup Wizard
    • Start The Setup Wizard
    • Step 1 - Add Your Network
    • Step 2 - Confirm Rules For Your Policy
  • Setup Guide
    • Set Up Your Network To Secure Internet Gateway
      • Step 1 - Add Network
      • Step 2 - Set DNS
      • Step 3 - Create Policy
      • Step 4 - Analyze
    • Set Up Your Roaming Endpoints
      • Step 1 - Download And Install The Agent
      • Step 2 - Anti-Tampering Password
      • Step 3 - Configure Policy
      • Step 4 - Analyze Logs
    • Protect Your Mobile Devices
  • Overview
    • View The Web Overview Dashboard
    • View The Security Overview Dashboard
    • Page Through Widgets And Change The Reporting Period
  • Reporting
    • View Web Activity Reports
    • Drill Into The 'Other' Slice On Top URL Categories
    • View Security Reports
    • View Mobile Activity Reports
    • View Local Resolver Activity Reports
    • View CCB Activity Reports
    • View And Manage Exports
  • Configure
    • Manage Policies
      • Create A Policy - Select Objects
      • Create A Policy - Settings
      • Update A Policy
      • Validate A Policy With Check Policy
      • Manage Domain Classification Requests
        • How Domain Classification Requests Work
        • Request A Category Change
        • Website Category Reference
    • Policy Settings
      • Manage Security Rules
        • Create A Security Rule - Name
        • Create A Security Rule - Settings
      • Manage Category Rules
        • Create A Category Rule - Name
        • Create A Category Rule - Settings
      • Manage Domain B/W Lists
        • Create A B/W List - Name
        • Create A B/W List - Settings
        • Block By Country Top-Level Domain
      • Manage Block Pages
        • Create A Block Page - Name
        • Create A Block Page - Single Page For All Blocked Domains
        • Create A Block Page - Different Pages Per Block Reason
        • Redirect Blocked Users To A URL
    • Objects
      • Manage Networks
        • Add A Network
        • Add A Network - Additional Settings
        • Add A Network With A Dynamic IP Address
      • Manage Roaming Devices
        • Set An Anti-Tampering Password
        • Download The Roaming Agent
        • Deploy The Roaming Agent Through Endpoint Manager
      • Manage Mobile Devices
        • Add A Mobile Device
  • Shadow AI
    • Shadow AI Summary
    • Discovered AI Tool Catalog
    • Top AI Devices, Mobile Agents And Networks
    • Recent AI Blocks
    • Export Shadow AI Data
    • Block AI Tools
    • How Shadow AI Counts Requests
  • View Account Information And Licences

Shadow AI

• Click 'Shadow AI' in the top-menu to open the 'Shadow AI Discovery' page. On a narrow screen the menu shows icons, and 'Shadow AI' is the eye icon.

Shadow AI gives you DNS-based visibility into the AI services your users reach. It shows which tools are in use (such as ChatGPT, Claude, Gemini, Grok, Perplexity and Harvey, and more than 30 others), how heavily, from which devices and networks, and how many requests are blocked.

Shadow AI reads the DNS traffic that already passes through Secure Internet Gateway, so you do not install anything. Use it to see unsanctioned AI use before you decide whether to block, allow or govern it.

The page is divided into the following areas:

• Summary tiles - Six figures for the selected time range: total and blocked requests, tools, devices, top category and block rate.

• AI Traffic Trend - Allowed and blocked AI requests over time.

• Category Distribution - The share of AI requests in each AI category.

• Discovered AI Tool Catalog - Every AI tool with traffic, with its request count and status.

• Top AI Devices - Devices ranked by AI request volume.

• Recent AI Blocks - Recent blocked AI requests.

• Top AI Networks - Networks ranked by AI request volume.

• Top AI Mobile Agents - Mobile devices ranked by AI request volume.

At the top right, 'Export CSV' exports the data and 'New AI Policy' starts a wizard that adds AI categories to a category rule. Possible time ranges are Last 1 Hour, Last 24 Hours and Last 7 Days. MSP customers can view the Shadow AI statistics of a particular customer.

Blocking is done through policies, as explained in 'Block AI Tools'.

See the following sections for more information

• Shadow AI Summary

• Discovered AI Tool Catalog

• Top AI Devices, Mobile Agents and Networks

• Recent AI Blocks

• Export Shadow AI Data

• Block AI Tools

• How Shadow AI Counts Requests