The Network Is Quietly Becoming the Referee for AI Traffic
As AI tools multiply inside companies, firewalls are being asked to do a job they were never designed for: policing conversations between machines that think.
Key points
- Network firewalls, the tools that filter internet traffic in and out of a company, are being repurposed to watch AI activity.
- The old model of users talking to apps is being replaced by AI agents that talk to other AI agents, often without a human in the loop.
- Security teams are struggling because AI traffic looks like normal web traffic, making it hard to spot misuse.
- Identity checks (proving who is calling an AI service) matter more than ever, because API keys are now the front door.
- Expect vendors to rebrand existing firewalls as "AI-aware" through 2025, with mixed results.
For thirty years, the firewall has done one job well. It sits at the edge of a company's network and decides which traffic gets in and which gets blocked. Simple idea, hard engineering.
That model is now under strain. The reason isn't a new hacking group or a fresh vulnerability. It's the quiet arrival of AI tools inside almost every business, from customer service bots to coding assistants to document summarisers.
The Hacker News flagged the shift this week, and the framing is worth taking seriously: the network itself is becoming the place where AI gets governed. Not the app, not the model. The pipes.
Why can't existing firewalls just handle this?
Because AI traffic looks, to a firewall, like any other web request. A chatbot asking a language model for help uses the same encrypted channel as someone loading a news site.
Traditional firewalls inspect where traffic is going and what protocol it uses. Spotting a connection to a known-bad server is their comfort zone. Reading the meaning of a prompt sent to an AI service is not, and they won't notice that an employee just pasted a customer database into a public chatbot.
The technical term for that channel is TLS, the encryption that puts the padlock in your browser bar. It hides content by design. That's great for privacy and terrible for anyone trying to see what an AI is being asked to do.
What actually changes when AI agents talk to each other?
Humans stop being the slowest part of the loop. AI agents can make thousands of decisions a second, calling other services, spending money, moving data.
A person used to log in, click around, and a security tool could watch the pace of that behaviour. Now an AI agent authenticates with an API key (a long password that software uses to prove its identity) and fires off requests at machine speed. The damage from a leaked key, or an agent tricked by a booby-trapped document, happens before anyone notices.
This puts authentication (proving who is calling) under pressure that it used to share with authorisation (deciding what they're allowed to do). The OAuth standard that governs short-lived access tokens was not written with autonomous agents in mind. Our earlier story on AI agents multiplying inside company directories found that most organisations have no clear picture of how many agent logins they now have, or what those logins can reach.
Multi-factor authentication, the code-from-your-phone step, doesn't help here either. Machines can't receive a text message. So the industry is pushing towards short-lived tokens and rotating credentials, which is sensible but far from universal.
Should ordinary people care?
Yes, in one practical way. The AI tools you use at work almost certainly send your questions to a server somewhere else. What you type is data, and that data can leak.
| Shift | Old world | New world |
|---|---|---|
| Who initiates traffic | A person at a keyboard | An AI agent acting on their behalf |
| Speed of decisions | Human pace | Thousands per second |
| Main security check | Password plus MFA | API key or token |
| What firewalls see | Clear patterns | Encrypted, uniform traffic |
A reasonable rule for staff: treat any AI chat window as if you were emailing a stranger. Don't paste anything you wouldn't send to that stranger. Ask your employer which AI tools are approved. If nobody can tell you, that's your answer.
Where this is heading
Expect a wave of "AI firewalls" and "AI gateways" from the usual vendors over the next year. Fortinet is already moving in this direction: we covered the FortiGate 1200G launch on 29 July, an appliance that pushes cloud-style policy enforcement into company-controlled buildings. Some new products will genuinely inspect prompts and responses. Others will be existing kit with a fresh sticker. Buyers need to ask what is actually being inspected, and whether the tool can tell a helpful summary from a data exfiltration attempt.
The network isn't a bad place to enforce these controls. It's often the only place a security team can see everything. But identity, logging and sensible limits on what agents can do still matter more than any gateway. The firewall is a reasonable first filter. Treating it as the last line of defence for AI misuse is a stretch.
