Block Unsanctioned AI Destinations

Blocks access to unsanctioned AI apps at the network layer — enforcing org-wide blocking through Defender for Cloud Apps and applying user and group-level restrictions through Entra Internet Access.

Core capabilities

Cloud App Discovery Microsoft Defender for Cloud Apps

Tag discovered AI apps as sanctioned or unsanctioned and enforce org-wide network blocking of unsanctioned apps

Supporting capabilities 1

Web Content Filtering Microsoft Entra Internet Access

Apply granular user and group-level web content filtering to AI app destinations