Endpoint Protection

// POST /api/saas/endpoint/policies
{
  "name": "Default AI Policy",
  "scope": {
    "type": "organization",  // organization, group, user
    "targets": ["org_abc123"]
  },
  "rules": {
    "aiServices": {
      "mode": "allowlist",  // allowlist, blocklist
      "allowed": [
        {
          "domain": "chat.openai.com",
          "name": "ChatGPT Enterprise",
          "conditions": {
            "requireDlp": true,
            "maxInputLength": 5000
          }
        },
        {
          "domain": "claude.ai",
          "name": "Claude for Work",
          "conditions": {
            "requireDlp": true,
            "allowedDomains": ["PERSONAL", "CORPORATE"]
          }
        }
      ],
      "blocked": [
        { "domain": "*.openai.com", "except": ["chat.openai.com"] },
        { "domain": "bard.google.com" },
        { "domain": "perplexity.ai" }
      ]
    },
    "dataProtection": {
      "blockCopyPaste": {
        "enabled": true,
        "patterns": ["CREDIT_CARD", "SSN", "API_KEY", "PASSWORD"]
      },
      "warnBeforeSubmit": {
        "enabled": true,
        "threshold": 50  // Risk score threshold
      },
      "preventScreenshot": false
    },
    "logging": {
      "logAllInteractions": true,
      "logBlockedAttempts": true,
      "retentionDays": 90
    }
  },
  "enforcement": "block",  // block, warn, log
  "enabled": true
}

// POST /api/saas/endpoint/dns-config
{
  "enabled": true,
  "mode": "blocklist",
  "blockedDomains": [
    // OpenAI
    "chat.openai.com",
    "api.openai.com",
    "platform.openai.com",

    // Anthropic
    "claude.ai",
    "api.anthropic.com",

    // Google
    "bard.google.com",
    "gemini.google.com",

    // Other AI services
    "perplexity.ai",
    "you.com",
    "poe.com",
    "character.ai",
    "midjourney.com",
    "stability.ai"
  ],
  "allowedDomains": [
    // Exceptions pour services approuves
    "chat.openai.com"  // Si ChatGPT Enterprise approuve
  ],
  "blockPage": {
    "enabled": true,
    "message": "Cet outil IA n'est pas approuve. Contactez IT pour plus d'informations.",
    "contactEmail": "it@company.com"
  },
  "integration": {
    "type": "dns_forwarder",  // dns_forwarder, proxy, firewall
    "forwarders": ["10.0.0.53", "10.0.0.54"]
  }
}

// GET /api/saas/endpoint/stats
{
  "period": "24h",
  "endpoints": {
    "total": 342,
    "active": 298,
    "offline": 44
  },
  "interactions": {
    "total": 1247,
    "byService": {
      "chat.openai.com": 845,
      "claude.ai": 312,
      "gemini.google.com": 90
    }
  },
  "blocked": {
    "total": 89,
    "byReason": {
      "unapproved_service": 52,
      "dlp_violation": 23,
      "policy_violation": 14
    }
  },
  "topUsers": [
    { "userId": "usr_123", "interactions": 145, "blocked": 3 },
    { "userId": "usr_456", "interactions": 98, "blocked": 0 }
  ]
}