topic Re: URL FILTERING in General Topics

URL FILTERING

Edluna — Fri, 29 Apr 2016 17:18:40 GMT

dear engineers.
could you help me!!

I have the following problem with the URL filter:

I commented that I have blocked the streaming media category in which enters youtube

when I open firefox without any problem with the rule applies both http and https.
But when I open the page with chrome does not apply the rule.

I can do help me !!!

Re: URL FILTERING

Raido_Rattameister — Fri, 29 Apr 2016 18:25:42 GMT

Chrome might use quic as application.

Try what happens if you block that in your sec policy.

Re: URL FILTERING

reaper — Mon, 02 May 2016 07:11:38 GMT

besides blocking Quic, you will also need to make sure SSL decryption is enabled

youtube uses SSL by default on a certificate from it's parent company google, so without SSL decryption, the only information available is the common name in the certificate, which is *.google.com

Re: URL FILTERING

Remo — Mon, 02 May 2016 09:32:47 GMT

Actually it should be possible for the firewall (depending on the PAN-OS Version) to see www.youtube.com (even without decrypting the connection) in the SNI extension of the ssl-handshake

Re: URL FILTERING

reaper — Mon, 02 May 2016 10:36:06 GMT

you're right! i forgot about SNI there for a second 🙂

ok, must be 'quic' thats enabled by default in chrome 😉

Re: URL FILTERING

Edluna — Mon, 02 May 2016 17:23:35 GMT

Apply the protocol blocking google youtube quic and everything was blocked.
I also discovered that you can disable the protocol from chrome.

thank you very much.