SecurityInsight settings · Settings > AI
AI for the endpoint engine
| Key | SI_EnableAI_endpoint |
|---|---|
| Where | Settings > AI > Where AI is used |
| Type | On / off |
| Default | Off, unless AI is turned on for all engines. |
| Edition | Community |
| Confirmation | SecurityInsight asks you to confirm before it is switched on. |
What it does
An override for ONE engine: turns on Azure OpenAI classification for the endpoint engine only, while AI integration is off. With AI integration on it changes nothing.
When enabled
Devices without a rule-based tier are classified by AI instead of getting the default tier. Adds AI cost and run time. Needs the Azure OpenAI settings; SI_DisableAI_endpoint wins over it.
When disabled
unless AI is turned on for all engines.
Risk and how to reverse it
Device data of untiered devices is sent to YOUR Azure OpenAI deployment, and each call costs. Reversible at once.
Requires
Read by: endpoint.
Recommended
Leave it off and use AI integration (on = on for all engines); this only turns the endpoint engine on alone.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack