Safari Montage YouTube

MCabe — Tue, 17 Dec 2019 19:32:58 GMT

We have a school system that is want to utilize Safari Montage to filter video that an administrator whitelisted. These whitelisted video adds a referrer (somesite.someschool.org) to the http request that will go to that specific video hosted at YouTube. With SSL Decrypt enable and quic being block, the firewall will inspect the outbound traffic for the referrer, pattern matching based on this referrer with http-req-params on both GET and POST, and identify the traffic as a custom application called Safari-Youtube.

The end goal is to have separate security policies for teacher and students based on User-ID. Teachers will be able to go to youtube-base and youtube-streaming, but students will only be able to go to video with the custom application Safari-Youtube. We have been able to created the custom application and applied it to only a test workstation. This first work without issue. However, as time went on testing with other videos, this started not to consistently work. According to the logs, the traffic is being decrypted, but the application is no longer being constantly identify as the custom app and is blocked by the firewall. Sometimes it flips between Safari-Youtube and youtube-base. Sometimes youtube-base only. We tried different iteration of troubleshooting, but still are not able to replicate the success when the custom application was first tested. There were not any changes done on the firewall or Safari Montage after the first successful test.

Requesting any insight to an issue similar to this one.

topic Safari Montage YouTube in Custom Signatures

Safari Montage YouTube