topic Re: How to block www.youtube.com completely in General Topics

How to block www.youtube.com completely

imran_sharin — Fri, 24 Jun 2016 10:12:53 GMT

Dear All,

Appreciate if you can advise how to block www.youtube.com completely. I have try using URL-Filtering and application layer level but still failed. I am using PA-3020 OS version 7.0.3

Imran

Re: How to block www.youtube.com completely

TranceforLife — Fri, 24 Jun 2016 10:20:19 GMT

Hi Imran,

Is it http or https traffic? Please confirm. SSL decryption might be required

Re: How to block www.youtube.com completely

Roby_Sreejith — Fri, 24 Jun 2016 10:37:19 GMT

In ur filtering block list, try adding *.youtube.com

Re: How to block www.youtube.com completely

Raido_Rattameister — Fri, 24 Jun 2016 10:42:00 GMT

Enable SSL decryption as some Youtube traffic can be identified as SSL.

Drop youtube application.

Add *.youtube.com and youtube.com to URL profile blacklist.

Block quic application as Chrome accesses Google services over quic that is UDP based.

And if this all fails then try to deny any traffic that firewall can't decrypt with ssl decryption profile.

Re: How to block www.youtube.com completely

imran_sharin — Fri, 24 Jun 2016 10:40:04 GMT

I want to block, I want to block all http and https traffic... is there need to perform SSL description.. appreciate if you can teach me to do that.. 🙂

Re: How to block www.youtube.com completely

Raido_Rattameister — Fri, 24 Jun 2016 10:45:55 GMT

If you don't decrypt https then firewall uses data on the certificate.

It can't see what is inside encrypted payload.

If computers behind firewall are under your control (you can install additional root certificates) then it is an option. If it is kind of university environment where students come with their own laptops then you can't do ssl decryption.

More info here:

https://live.paloaltonetworks.com/t5/Management-Articles/SSL-decryption-resource-list/ta-p/70397

Re: How to block www.youtube.com completely

imran_sharin — Fri, 24 Jun 2016 10:46:52 GMT

Hi Raido,

Can you teach me how to do SSL decryption... sorry if my question is too novice for you..

Re: How to block www.youtube.com completely

imran_sharin — Fri, 24 Jun 2016 10:49:59 GMT

Hi Raido,

TQVM... much appreciate your help 🙂

Re: How to block www.youtube.com completely

Raido_Rattameister — Fri, 24 Jun 2016 11:31:50 GMT

Check the link I gave you earlier and ask when you are stuck.