Shadow GenAI

Overview

Motific.ai provides integration with Cisco Umbrella that provides you with multiple levels of defense against internet-based threats and helps you track the unauthorized usage of generative AI applications.

Shadow GenAI is a term in Motific.ai that refers to the unofficial or unapproved generative artificial intelligence systems that employees use within an organization without the knowledge or approval of the IT department. It’s analogous to “shadow IT,” where employees use unauthorized technology solutions.

Before integrating Cisco Umbrella account

Before integrating your Cisco Umbrella account with Motific.ai there are some minimal recommended settings in Umbrella that need to be performed. These are the basic settings needed for Motific.ai to seamlessly get the Shadow GenAI the information from your Umbrella account to Motific.ai.

These are only a few of the steps that are needed by Motific.ai. You can have any advanced settings in your Cisco Umbrella account. Refer Cisco Umbrella documentation for more information.

Create a DNS policy in Cisco Umbrella

Following are the minimal DNS policies that need to be set up for generative AI applicataions to be blocked or allowed to be used in your organization.

Navigate to Umbrella Policies > Management > DNS Policies > Add.
Select Apply Destination Lists and Application Control.
In Destination Lists > Global Allow List to add Motific.ai.
In Control Applications select Generative AI applications you want to control
Next, provide a name for your policy. (Note: It takes several hours for the policy to be deployed and take effect)

Generate API key in Cisco Umbrella

Generate and use your API key credentials to authenticate requests to the Umbrella API

Navigate to Umbrella Admin > API Keys > Add and create a new key with the following minimal requirements. Key Scope Reports with Read-Only permissions.
Retrieve generated API Key and Key Secret

Mapping Cisco Umbrella API key and key secret

To connect your Cisco umbrella with Motific.ai to track the shadow genAI usage you need to provide the API Key and Key Secret.

Below is the mapping for the Cisco Umbrella API key and key secret with Motific.ai:

Client ID: Cisco Umbrella API key
Client secret: Cisco Umbrella key secret

Please make a note of the above when you begin the Cisco Umbrella integration with Motific.ai

Shadow GenAI

You can integrate your Cisco Umbrella account with Motific.ai and discover the generative AI usage in your organization with Motific.ai.

Follow the steps below to integrate your Cisco Umbrella account:

Navigate to settings page, click on the Settings menu on the lower-left corner of the navigation bar.
Go to Integrations tab.
Click on the CASB- Umbrella label. A pop-up to enter the Client ID and Client secret opens. You can find
Enter the Client ID and Client secret.
Click Save to save the Cisco Umbrella details.

If integrating your Cisco Umbrella account for the first time, then alternatively:

Navigate to monitoring page.
Click on the Connect.
You are taken to the integration tab in the Settings menu.
- Enter the Client ID and Client secret.
- Click Save to save the Cisco Umbrella details.
Once you integrate Cisco umbrella with Motific.ai, navigate to the Monitoring » Shadow GenAI.
When you are done configuring Cisco Umbrella, you can see the activity in the Motific.ai Shadow GenAI tab.