Automatically enabled when you configure iboss permissions in your agent workflow. iboss is connected per client, so the agent calls the iboss account of the ticket’s company, with that client’s API key.
What it does
- Read URL event logs, monthly drill-down reports (top blocked domains, categories, visited domains and users) and AI conversation governance
- Add, import and remove domains, URLs and IP ranges on allow list and block list policies, for good or for a set time
- Read, create, change and delete policy layers, SaaS and internet access policies, private access, connector and DLP policies, with their settings
- Read and change policy groups and each group’s application, country and file upload controls
- Read and change firewall rules, locations, private networks and private access peers, connector settings, proxy and SSL decryption settings, DLP rules and incident settings
- Add, change and remove proxy users and devices, and the account’s own copies of catalog resources
Safety Controls
- Always asks a technician: deleting a location, turning the firewall off, and setting a proxy user’s password.
- Never sent: rotating the API key, which would stop Neo’s key at once.
- Never shown to the agent or a script: fields that hold a secret, such as a connector’s security key or a password, and tokens inside logged URLs and AI conversations. Neo removes them from every answer. On a settings change, Neo reads the stored settings, secret included, and writes the secret back unchanged.