topic Re: Block youtube videos after allowing 5 videos. in General Topics

Block youtube videos after allowing 5 videos.

inderjit21 — Mon, 13 Mar 2017 10:55:12 GMT

Is it possible to allow a user say only 5 youtube video/day and then send customer page saying you have used your 5 videos for today or if someone is watching video for 1hr and then stop youtube video access.

Re: Block youtube videos after allowing 5 videos.

BPry — Mon, 13 Mar 2017 13:18:27 GMT

Application control in this granularity would be a specialty of Barracuda web filters, I'm pretty positive that the Palo Alto itself doesn't have a way of performing this functionality.

Re: Block youtube videos after allowing 5 videos.

bradk14 — Mon, 13 Mar 2017 14:19:55 GMT

the only way I can even think this possible is to use some sort of convoluded method using the API to analyze logs and add client IPs to a block rule after 5 attempts. you'd have to factor in youtube API if you want to calculate length, but in order to even see a user went to a video directly, you'd have to have SSL decryption, otherwise you won't get anything but the hostname.

Re: Block youtube videos after allowing 5 videos.

BPry — Mon, 13 Mar 2017 15:51:52 GMT

@bradk14 I'm not even positive this would really be able to be done with utilizing the API. You would have to query the source IP of anybody who went to Youtube, figure out a way to ignore a session under a certain size, and then you would need to actually have something feed that list of addresses into the firewall and block them until a certain time, in which case the rule would need to be cleared of IPs and start all over again. It probably could be done but it wouldn't be practical at all.