Control provider hostnames
Use Egress rules to block or allow the hostnames of an AI provider, such as its chat app or API.
An Egress rule controls which hostnames of an AI provider users can reach. Use it to block a provider entirely, or to allow its API but not its chat app.
New to policies? Start with Policies overview.
Add an egress rule
- Go to Security → Policies and open a policy, or click Create Policy.
- Click Add rule and choose Egress Rule.
- Fill in the fields below and click Add rule.
- Click Save, then Deploy.
Fields
Field | What it does |
|---|---|
Enforcement | Block, Warn or Watch. |
Provider | Required. The provider whose hostnames the rule controls. |
Mode | See below. |
Hostnames | The provider's hostnames, for example |
Modes
- Block list: blocks the selected hostnames.
- Allow list: allows only the selected hostnames for that provider.
- Block all: blocks every hostname of the provider.
Rules match on hostname only. They don't filter by port, protocol or time of day.
To allow a provider but limit which of its models can be used, use Restrict AI models.
When rules overlap
A policy can hold one Egress rule per provider. Add a separate rule for each provider you want to control. If several policies cover the same device, the most specific scope wins (Client, then User, then Group, then Organization). At the same level, the stricter rule wins: Block all, then Allow list, then Block list. See Policies overview for the full rules.
Need help?
Contact support@getalesia.com.
Was this helpful?
Your feedback shapes what we write next.