Web search stays within your policy

Web search runs only within your configured policy. Models that browse the internet on their own — Perplexity Sonar and similar self-searching models — are refused, hidden from the model picker, and never used for routing or failover, so no chat can reach the web outside your web-search policy. An administrator can allow such models explicitly. No request to a model provider can carry a native web-search, grounding, or hosted-tool field.

Web results are treated as untrusted input: a result whose text trips a firewall block rule, such as a prompt-injection phrase, is dropped before the model sees it, and a message routed to a trusted fallback model because it contains personal data is never searched.

No action required.