Addressing Shadow AI with F5 BIG-IP SSL Orchestrator

Key Concepts:

• Shadow AI
• User Coaching
• Big IP
• SSL Orchestrator
• iRule
• Custom HTML Page
• Justification Option

User Coaching for Shadow AI Mitigation

The video focuses on implementing user coaching as an alternative to outright blocking access to websites potentially associated with Shadow AI. User coaching aims to provide guidance and awareness to users about the risks involved in accessing such content.

Installation Process on Big IP

The video demonstrates a step-by-step process for installing user coaching functionality on a Big IP system:

1. Download Script: A script is downloaded using a command (not explicitly shown but implied to be a wget or similar command).
2. Change Permissions: The script's permissions are modified to make it executable using chmod.
3. Set Username and Password: The username and password for the script are configured. The presenter types in a password.
4. Launch Installer: The installer script is executed, which installs the necessary policy and components for user coaching.

Verification in SSL Orchestrator

After installation, the user coaching service is verified within the SSL Orchestrator. The presenter shows that the service has been created and then adds it to an existing service chain.

User Experience

When a user attempts to access a site flagged as potentially related to Shadow AI, a coaching screen is displayed. The video shows a "very basic coaching screen" initially. The user is then able to proceed to load the site.

Customization Options

The video highlights customization options available through iRules to enhance the user coaching experience:

1. Justification Option: The presenter focuses on the "justification option" within the iRule. This allows users to provide a reason for accessing the potentially risky site.
2. Custom HTML Page: The presenter demonstrates the ability to replace the default coaching screen with a fully customized HTML page. This page can include elements like:
   • A link to an email address for reporting.
   • A field for users to enter a justification message.

Example of Custom HTML Page

The video shows an example of a custom HTML page with a link at the bottom for an email address and a field for entering a justification message. The justification message is logged for auditing purposes.

Technical Terms

• Shadow AI: AI applications or tools used within an organization without the knowledge or approval of the IT department.
• Big IP: A suite of application delivery and security products from F5 Networks.
• SSL Orchestrator: A component of F5's Big IP that manages SSL/TLS traffic.
• iRule: A scripting language used on F5's Big IP platform to customize traffic management.

Logical Connections

The video logically connects the problem of Shadow AI with the solution of user coaching. It then provides a practical demonstration of how to implement user coaching on a Big IP system, including installation, verification, and customization.

Synthesis/Conclusion

The video demonstrates a practical approach to mitigating the risks associated with Shadow AI through user coaching. By providing users with guidance and awareness, and by allowing them to justify their access to potentially risky sites, organizations can gain better visibility into Shadow AI usage and promote responsible behavior. The customization options available through iRules allow for tailoring the user coaching experience to specific organizational needs.