topic Re: blocking streaming in General Topics

blocking streaming

Buccaneer — Mon, 30 Oct 2017 11:24:02 GMT

Is it possiblt to block all streaming sites without URL filtering?

Im looking to stop things like iplayer and basically all streaming as if using up a lot of bandwidth, yjinkgs like iplayer.

It looks like its showing up as ssl traffic on the firewall.

Re: blocking streaming

OtakarKlier — Mon, 30 Oct 2017 16:00:32 GMT

Hello,

URL filtering is a good step if you can. For sites that use SSL, you would have to perform SSL decription and then block the traffic at the application layer.

Hope that makes sense.

Regards,

Re: blocking streaming

BPry — Mon, 30 Oct 2017 18:41:27 GMT

@Buccaneer

I'm assuming that you simply don't have a URL Filtering license, which is why you can't utilize URL Filtering? If that's the case you can still create custom URL Categories and utilize that category without the license, if you do it right it should work for the most part. Then you simply build out a URL Filtering profile that blocks that custom category. I can send you the list of streaming services that I already have built out for situations like this if you want to utilize that as a starting point.

Re: blocking streaming

Buccaneer — Mon, 30 Oct 2017 19:01:40 GMT

Hi there

The lack of licence is the main issue, up until now I didnt know I needed it until. Im guessing is since BBC iplare changed to requiring a logon that ssl became an issue. We only use this set of firewalls for an offshore project once a year for about two months so as its all offshore its not the time to change the licences.

A list of streaming services to get started would be appreciated as bandwidth is charge by the MB.

Thanks

Re: blocking streaming

BPry — Mon, 30 Oct 2017 19:08:05 GMT

So I made an application-group that includes the app-ids below.

<entry name="Streaming Services">
              <members>
                <member>air-video</member>
                <member>amazon-cloud-player</member>
                <member>amazon-instant-video</member>
                <member>amazon-unbox</member>
                <member>directv</member>
                <member>hulu</member>
                <member>naver-streaming</member>
                <member>netflix</member>
                <member>netflix-base</member>
                <member>netflix-streaming</member>
                <member>ontv</member>
                <member>pandora-tv</member>
                <member>plex</member>
                <member>popcorn-time</member>
                <member>redbox-instant</member>
                <member>sbs-netv</member>
                <member>sling</member>
                <member>twitch</member>
                <member>tvb-video</member>
                <member>tv4play</member>
                <member>streambox</member>
                <member>xfinity-tv</member>
              </members>

Then we did the actual URL Filtering side of things that included all of these.

<entry name="Streaming Test">
                <list>
                  <member>amazon.com/Amazon-Video</member>
                  <member>directv.com/tv</member>
                  <member>directvnow.com</member>
                  <member>freeetv.com</member>
                  <member>hulu.com</member>
                  <member>megavideomovies.com</member>
                  <member>mlb.tv</member>
                  <member>naver.com</member>
                  <member>streaming.naver.com</member>
                  <member>nextmedia.com</member>
                  <member>*.directv.com</member>
                  <member>ontveg.com</member>
                  <member>pandora.tv</member>
                  <member>plex.com</member>
                  <member>plex.tv</member>
                  <member>popcorn-time.to</member>
                  <member>popcorntime-online.tv</member>
                  <member>popcorntime.sh</member>
                  <member>live.qq.com</member>
                  <member>qq.com</member>
                  <member>sling.com</member>
                  <member>twitch.tv</member>
                  <member>tv4play.se</member>
                  <member>my.xfinity.com</member>
                  <member>netflix.com</member>
                  <member>*.netflix.com</member>
                  <member>https://plex.tv</member>
                  <member>sling.com</member>
                  <member>https://sling.com</member>
                  <member>go90.com</member>
                  <member>www.go90.com</member>

FYI,

Just looking at BBC's iPlayer now and I don't know how easy this is going to be to actually block if you aren't utilizing SSL decryption. The main issue being that the URL is still bbc.co.uk; you may be able to block iplayer-webv.files.bbci.co.uk to actually get it to stop loading, but I've never tried since BBC isn't that widely utilized in the US.