Edge SWG policy to block AI Mode search in the Google search portal

Products

• ProxySG Software - SGOS
• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Edge SWG admins may be looking for an option to block AI Mode search in the Google search portal.

Resolution

Option 1 - Simple policy to block Google AI Mode search

The following CPL policy should block AI Mode as of now:

<proxy>
url.host.substring="google.com" url.path.substring=search url.query.substring="udm=50" deny

 

Option 2 - Extended policy to enforce regular search for Google search queries and to stop Google search AI overview

define condition Method_CONNECT
    http.method=(CONNECT)
end condition Method_CONNECT

<proxy> condition=!Method_CONNECT
url.domain=google.com url.query.regex=!"" action.GoogleAIMode_rewrite1(yes)
url.domain=google.com url.query.substring="udm=" action.GoogleAIMode_rewrite2(yes)
url.domain=google.com url.path.substring=search url.query.substring=!"udm=" action.GoogleAIMode_rewrite3(yes)


define action GoogleAIMode_rewrite1
  rewrite(url, "^(.*)$", "$(1)/?udm=14")
end

define action GoogleAIMode_rewrite2
  rewrite(url, "^(.*)udm=\d+(.*)$", "$(1)udm=14$(2)")
end

define action GoogleAIMode_rewrite3
  rewrite(url, "^(.*)$", "$(1)&udm=14")
end

Additional Information

Please note that Google may change AI Mode search query parameters with time hence the policy rule may stop working. 

Make sure TLS Inspection is enabled for the Google search web site.

The same CPL code can be used for Cloud SWG tenants managed by Management Center.