topic Re: Blocking videos for a special url category in General Topics

Blocking videos for a special url category

Retired Member — Sat, 14 Dec 2013 09:50:04 GMT

Hi,

We know that url category only works with http and https.So if we want to block all videos(http-video,flash,youtube videos) for a url category(for example social-networking), can we do this with PaloAlto ?

(with custom signatures or anyhting else)

Re: Blocking videos for a special url category

hyadavalli — Sat, 14 Dec 2013 12:07:24 GMT

Hello Panos,

You can do that by creating an application filter with blocking category:Media and sub-category:photo-video.

Hope this is what you are looking for.

Regards,

Hari Yadavalli

Re: Blocking videos for a special url category

Retired Member — Sat, 14 Dec 2013 12:11:52 GMT

that will not work for only 1 url category.

Re: Blocking videos for a special url category

hyadavalli — Sat, 14 Dec 2013 12:14:33 GMT

May be I understood your question wrong.

So, you just want to block videos for a particular url filtering caetgory, is that right?

Regards,

Hari Yadavalli

Re: Blocking videos for a special url category

Retired Member — Sat, 14 Dec 2013 12:18:40 GMT

yes that is right.I don't know if it is possible.Because for that url category sites there are maybe youtube videos for example.But we don't want to block youtube in general

Re: Blocking videos for a special url category

VinceM — Sat, 14 Dec 2013 14:09:39 GMT

Hi PanOs

For me, you can't do that easilly ..

Because as you said, url cat is just for Http and Https and most often, when you read a video enbeded in a web site, traffic is not seen as http(s) but as an application flow.

Like for youtube, if you block youtube url cat, you block all access to youtube web site

If you block youtube app, you block video flows in youtube.

Mean there there is no URL cat for video traffic ....

Maybe possible to do that whith custom app but site per site because in custom app you can't use url cat ...

Hope clear

Re: Blocking videos for a special url category

tasonibare — Mon, 16 Dec 2013 20:22:52 GMT

panos,

You can combine an application filter for streaming media along with the URL category you want to block in a single security policy and then deny any traffic matching these criteria.

Perhaps that would help achieve what you're looking for.

Below is an example of such configuration:

Regards,

tasonibare

Re: Blocking videos for a special url category

Retired Member — Mon, 16 Dec 2013 20:26:11 GMT

this will not work because url category is only for http/https traffic.

Thanks