Configuration features

Domino IQ features and updates

Server component updates

Domino IQ server can use NVIDIA CUDA-built AI inference server components that work with only Windows or Linux servers. Domino IQ server components can now run on both CPU and NVIDIA GPU enabled hardware built with the NVIDIA 12.9 Update 1 Toolkit, which specifies the compatible NVIDIA GPU drivers for Windows and Linux Domino servers.

New guard model option

Domino IQ now integrates guard models to enhance ethical and secure use of large language models (LLMs) in applications. Guard models, such as Meta’s Llamaguard 3, IBM’s Granite Guard 3, and Google’s ShieldGemma, act as a protective layer to prevent harmful content, data leaks, and prompt injection risks. The guard model automatically classifies content as risky or not, based on predefined guidelines.

For more information, see Understanding LLM guard models.

New RAG capability

Retrieval-augmented generation (RAG) is a technique for enhancing the accuracy and reliability of generative AI models with information fetched from relevant data sources like databases. In Domino 14.5.1, RAG support in the Domino IQ server enables a command defined in dominoiq.nsf to use a Domino database as a RAG source database.

For more information, see the section RAG for the Domino IQ server

New server commands for Domino IQ statistics

ClamAV support for Domino mail scan

Domino adds support for the ClamAV protocol for antivirus scanning of mail message attachments.

Domino's third-party antivirus scanner now supports either the ICAP protocol or the ClamAV protocol. Note the following requirements:

• TLS is required to connect to the antivirus scanner using the ICAP server.
• TLS is optional for ClamAV because ClamAV does not directly support it. To use TLS with ClamAV you need a third-party proxy server.

For more information, see Scanning message attachments for viruses and the topics that follow it.

New Directory Sync configuration option

You can now disable Active Directory users in security groups.

If you don't want to trust Active Directory users in security groups, enabling this feature causes only registered users in the security groups to be synced.