# How Zscaler controls GenAI SaaS

Source: https://ai.techclick.in/blog_zscaler_zia_genai_saas
Markdown: https://ai.techclick.in/blog_zscaler_zia_genai_saas.md
Publisher: Techclick Infosec Pvt Ltd

ZIA inline path for ChatGPT and AI/ML apps: SSL inspect first, Cloud App Control AI & ML rule, DLP paste-stop, Isolate vs AI Guard. Fail path if Do Not Inspect.

Lessons  ·  Cloud App Control  · GenAI SaaS

   Infographic · Day 02 / ZIA+AI · 10 min

   There is no magic AI button. Traffic still hits ZIA. Name the objects: Cloud App Control, SSL Inspection, DLP, Isolate, AI Guard.

   Say this out loud

    Caution is the coach. Isolate is the remote browser. DLP is the paste-stop. AI Guard is runtime for YOUR models. Do not mix the boxes.

## Why this exists

 Users open ChatGPT in a browser tab. Prompts, file uploads, and pasted source code leave the company over HTTPS. ZIA can see that traffic only if it is forwarded  and  decrypted. If SSL Inspection is Do Not Inspect, Cloud App Control and DLP see a domain name, not the prompt.

 The poster is the class drawing: one inline path, four actions, three inspection engines, four other official layers that are  not  that inline path.

## The inline path

 Read left to right:

- User / browser or ChatGPT tab — any device. Prompt and response are still HTTPS.

- Zscaler Client Connector or PAC — ZCC is the recommended forwarder. PAC also works. Traffic must reach ZIA.

- ZIA cloud / Zero Trust Exchange — all forwarded traffic terminates here. Policy enforcement point. Global anycast.

- SSL/TLS Inspection Policy = Inspect — decrypt so later engines can read the prompt. Required for inline controls.

- Cloud App Control → DLP — then an action: Allow, Caution, Block, or Isolate.

   Fail path — limited visibility

   SSL/TLS Inspection = Do Not Inspect → Cloud App Control / DLP cannot see the prompt → only domain-level Allow or Block is possible. That is why “we blocked chatgpt.com” still leaks if the user hits another AI app you never classified.

## Inspection stack (three layers)

- #### 1 · Cloud App Control — AI & ML Applications Path: Policy → URL & Cloud App Control → Cloud App Control Policy → Add → AI & ML Applications . Use the predefined ChatGPT app (or the AI & ML category). Granular ChatGPT actions include Chatting, Uploading, Downloading, Deleting, Sharing, Inviting.

- #### 2 · Inline DLP Path: Policy → Data Loss Prevention → Rule With Content Inspection . This is the paste-stop for source, PII, PCI, PHI.

- #### 3 · DLP engines + dictionaries Source Code, PII/PCI/PHI class, Exact Data Match (EDM), Indexed Document Match (IDM) if you licensed them. Without a dictionary, “block secrets in ChatGPT” is a slogan.

## Allow / Caution / Block / Isolate

     Action  What the user feels  When to use

       Allow   Full access (optionally with granular ChatGPT actions).  Approved users, after Inspect + DLP are on.
       Caution   End User Notification (EUN) coaches them, then access. Officially only for CONNECT, GET, or HEAD — one method per Caution rule.  Teach first. Not a remote browser.
       Block   Denied.  Shadow AI you will not permit.
       Isolate   Remote browser (Zero Trust Browser / Cloud Browser Isolation). Download/paste stay off the endpoint.  Need the app, not the data on disk. Requires an Isolation Profile. Isolate exists only if Isolation is enabled.

## Other official layers — not the inline path

#### A · AI Guard

 Runtime guardrails on prompts/responses for  enterprise-managed  AI / LLMs (prompt injection, data in prompts). Separate from public chatgpt.com Cloud App Control.

#### B · DSPM

 Finds and classifies sensitive data sitting in cloud / SaaS / AI stores. Not the inline paste-block.

#### C · CASB / SaaS Security — Data at Rest

 DLP for a ChatGPT Enterprise tenant: SaaS Application Tenants → ChatGPT → Data at Rest Scanning → Gen AI. Discovers data already in the tenant.

#### D · Analytics → Gen AI Security Reporting

 Sanctioned vs unsanctioned (Shadow AI), prompt visibility if Gen AI Prompt Configuration is enabled.

## Do this in the tenant

     https://admin.zscaler.net

     Training mock · not live

       Policy → URL & Cloud App Control → Cloud App Control Policy → Add → AI & ML Applications

### Add AI & ML rule

        Cloud applications  ChatGPT (AI & ML Applications)

        Application Access  Caution (EUN) — or Isolate if Isolation Profile exists

        Prerequisite  SSL/TLS Inspection Policy action = Inspect for this app

        Cancel  Save

   Source: Zscaler Help — Adding an AI & ML Applications Rule for Cloud App Control. Training mock, not a live tenant.

- #### Inspect first Policy → SSL/TLS Inspection → SSL/TLS Inspection Policy — Inspect for ChatGPT / AI & ML. Without this, stop.

- #### Write the AI & ML Cloud App Control rule Add rule, pick ChatGPT, set Allow / Caution / Block / Isolate. If Isolate, attach Isolation Profile.

- #### DLP on the same users Content inspection rule with Source Code + PII dictionaries. Test paste of a dummy secret.

- #### Prove it Web Insights Logs: user, cloud app = ChatGPT, SSL Inspected = Yes, policy action. Then Analytics → Gen AI Security Reporting if licensed.

## Traps

     Symptom  Likely miss  Fix

      Logs show chatgpt.com but no prompt  Do Not Inspect  Inspect that app, then retest.
      Caution never fires on POST chat  Caution is limited to CONNECT / GET / HEAD  Use Block, Isolate, or granular ChatGPT actions for chat/upload.
      Isolate greyed out  Isolation not enabled / no profile  Enable Cloud Browser Isolation; attach Isolation Profile.
      “AI Guard will stop ChatGPT.com”  Wrong box  AI Guard is for your hosted models. Public ChatGPT is Cloud App Control.
      Files already in ChatGPT Enterprise  Inline DLP never saw them  CASB Data at Rest Scanning on the tenant.

## Knowledge check

   Six judgement questions. If you mix AI Guard with Cloud App Control, redo the poster.

   Q1
   A Cloud App Control rule for ChatGPT exists, but Web Insights never shows the prompt. What failed first?

       AI Guard is off
       SSL/TLS Inspection is Do Not Inspect for that app
       DSPM has no scanner
       Gen AI Reporting is disabled

   Correct:  b . Inline Cloud App Control and DLP need decrypted traffic. Do Not Inspect leaves only domain-level Allow/Block.

   Q2
   Which sentence is true?

       Caution shows an EUN coach; Isolate is a remote browser
       Caution and Isolate are the same action
       AI Guard replaces Cloud App Control for chatgpt.com
       DLP runs even when SSL is not inspected

   Correct:  a . Do not mix the boxes. Caution coaches. Isolate relocates the browser. DLP needs inspect.

   Q3
   Where do you add the ChatGPT Cloud App Control rule?

       Policy → URL & Cloud App Control → Cloud App Control Policy → Add → AI & ML Applications
       Administration → Role Based Access Control
       ZPA → Application Segments
       DSPM → Data Stores only

   Correct:  a . Official Help path for an AI & ML Applications rule.

   Q4
   A user pastes source code into ChatGPT. Which control is the paste-stop on the wire?

       DSPM classifier
       Inline DLP with a Source Code dictionary, after Inspect
       AI Guard on a private LLM that the company does not host
       Gen AI Reporting dashboard only

   Correct:  b . Reporting sees yesterday. DSPM sees stores. Inline DLP is the paste-stop.

   Q5
   Isolate is selected but the rule will not save. What is missing?

       A PAC file on every laptop
       Isolation enabled and an Isolation Profile on the rule
       A custom URL category named Isolate
       AI Guard runtime

   Correct:  b . Isolate exists only if Isolation is enabled. Attach the Isolation Profile.

   Q6
   ChatGPT Enterprise already holds uploaded files. Which layer looks at data at rest in that tenant?

       Cloud App Control Allow
       SSL Inspection Caution
       CASB / SaaS Security Data at Rest Scanning for the ChatGPT tenant
       Client Connector posture

   Correct:  c . Inline path never saw those files. Scan the tenant.

       Check answers
       Reset

## Sources

- Zscaler Help — Adding an AI & ML Applications Rule for Cloud App Control

- Zscaler / OpenAI ChatGPT Enterprise Deployment Guide — granular ChatGPT actions, Isolate, SSL inspect for prompt visibility

- Zscaler Gen AI Security at a Glance — Cloud App Control, DLP, Isolation

- Techclick class poster: How Zscaler controls GenAI SaaS (Day 02 / ZIA+AI)

 Related:  URL Filtering + Cloud App Control  ·  SSL Inspection  ·  ZIA DLP  ·  ZIA traffic flow

---
Cite this Techclick lesson with the source URL. Do not invent fees, batch dates, or job guarantees.
Browse all lessons: https://ai.techclick.in/blogs
AI index: https://ai.techclick.in/llms.txt