ChatGPT - Only Allow ChatGPT and Block all other Generative AI Apps

Netskope Global Technical Success (GTS)

ChatGPT - Only Allow Chat GPT and Block all other Generative AI Apps

Netskope Cloud Version - 126

Objective

Only Allow Chat GPT and Block all other Generative AI 

Prerequisite

Netskope SWG or Next-Gen SWG license

Context

There are numerous cloud applications and websites categorized under Generative AI. A specific customer wishes to permit only ChatGPT while blocking access to all other cloud applications and websites within the Generative AI category.

Do You Know?

• As of May 23, 2025, there are a total of 549 Cloud Apps identified under Generative AI according to the Netskope App Catalog.

• The parent organization of ChatGPT is OpenAI.
• Netskope acknowledges OpenAI & ChatGPT as a Cloud Application and provides a pre-defined cloud app connector.
• With Netskope’s OpenAI predefined connector, customers can exercise control over the following activities:

• Traffic to the highlighted sub-domains/domains shown in the image above will be considered as OpenAI traffic.

• With Netskope’s ChatGPT predefined connector, customers can exercise control over the following activities:

• Traffic to the highlighted sub-domains/domains shown in the image above will be considered as ChatGPT traffic.

Configuration

• Tag OpenAI & ChatGPT as Sanctioned Applications

Question: Why do we need to TAG OpenAI as Sanctioned?

Answer: Because when an end-user attempts to authenticate on the ChatGPT homepage, the traffic redirects to the domain openai.com

• Create Real-time protection policies

Path: Netskope Tenant UI >>> Policies >>> Real-time Protection >>> New Policy

1st Policy

2nd Policy

Policy Order

Verification

Effective immediately, Realtime Policy will block access to all Cloud Apps and Websites categorized under Generative AI except ChatGPT

• Step 1 - Access Perplexity AI

Note - User Notification format used above Link

• Step 2 - Access ChatGPT

Author Notes

If the business use case is to permit access only to ChatGPT among generative AI tools, and to restrict ChatGPT usage to corporate accounts only, then the following articles should be referenced and combined.

Policy Order

Terms and conditions

• Some Generative AI platforms utilize a mechanism that switches traffic from HTTP/HTTPS to WebSockets. In that case, the aforementioned policy may not yield the desired results. Please consider raising a support case with Netskope GTS for further assistance.

• All documented information undergoes testing and verification to ensure accuracy.
• In the future, it is possible that the application's functionality may be altered by the vendor. If any such changes are brought to our attention, we will promptly update the documentation to reflect them.

Notes

• This article is authored by Netskope Global Technical Success (GTS).
• For any further inquiries related to this article, please contact Netskope GTS by submitting a support case with 'Case Type – How To Questions'.