YandexGPT

Ideco NGFW Novum v23 Adds Shadow AI Discovery, Dynamic Routing and QoS Controls

Ideco has released NGFW Novum v23, introducing detection for 83 AI application protocols including ChatGPT, Claude, DeepSeek, GigaChat and YandexGPT. The update enables organizations to identify Shadow AI usage across networks without mandatory TLS decryption and adds new content-filter categories for AI agents and AI services. Enterprise routing capabilities have been expanded with Prefix lists, Route maps, OSPF zones, BGP aggregation and BFD profiles to support large distributed environments. Additional features include internal Virtual Ethernet and Virtual Switch interfaces for VCE connectivity, QoS traffic prioritization, MTU/MSS tuning for IPsec, certificate-based authentication in Ideco Client and detection of tunneled traffic inside SSH and TLS sessions. The release positions the NGFW as the first layer of an emerging AI Security Layer that combines discovery, policy enforcement and future LLM proxy controls.

Building Secure On-Prem AI Assistants: How to Keep Corporate Data Inside Closed Contours

Many organizations hesitate to deploy AI assistants due to strict data protection rules that prohibit sending information to external clouds. The article explains how to implement AI models entirely within a company's own infrastructure, ranging from on-premise servers to fully offline laptops. It breaks down four deployment locations from public APIs to local devices and clarifies three distinct access levels: read, write, and execute. The author emphasizes that most business value comes from read-only access combined with human-in-the-loop controls for any irreversible actions. Practical recommendations include RAG over model size, quantization for local hardware, and maintaining immutable audit logs. The piece also warns that preparing clean knowledge bases often consumes more effort than the model itself.