We want to allow youtube edu videos for everyone on our network, but still block youtube for students. Youtube has a set up walkthrough that helps, but I need some assistance thinking this through. So any assistance would be helpful. I have posted the directions below...
In order to access YouTube for Schools you will likely need help from your school's network administrator so please share this information with him or her. This sign up process should only take minutes! Before you begin, make sure your school meets the following requirements:
Follow the three steps below and your school will have access to thousands of free educational videos in minutes. Once you are finished with the set-up be sure to read our our additional resources listed at the end of this page.
Choose one of the following two options, depending on which works for your school's network:
Ensure the following top-level domains are not blocked:
Your network should now be able to access the YouTube for Schools version of YouTube.com. You can grant unrestricted access to additional YouTube accounts (such as teachers) and approve additional videos for viewing in your school.
I have been hoping for this functionality for some time, via URL-rewrite - I'll link in the other community thread.
So far, best I have been able to come up with is forcing NAT for our students out a specific interface, and using a transparent proxy to modify that traffic.
URL-rewrite would also allow forced Google Safesearch - we had it ages ago in our BlueCoat Proxy - surprised PA dos not have a solution for this yet.
Here's the text, I will test this later today:
i just figured this out and wanted to share right away with everyone as i'm sure we'll get more calls on this from our clients that are in education, this is in reference to case # 73636 where the client wanted to allow youtube.com/education and content but block just youtube.com
1. above the student "Block youtube and facebook" policy rule with a URL filtering profile to block youtube.com and facebook.com we added a security policy that had a custom url category "youtube education" in the destination URL field applied to the policy with no URL-Filtering profile applied. we also had app signatures of youtube-base, youtube, web-browsing, ssl, flash, and http-video applied to the rule
2. the custom URL category "Youtube education" had the following URL / wildcard combinations in it.
3. the Client was able to validate that he could reach and play all education related videos but was still getting blocked on non-education videos.
Google has decided to do things the least URL-filter-friendly way, and asks YouTube EDU subscribers to tack on "&edufilter=4gvIYKewE7DDa88P7XzQTw" (or whatever your personal school code is) TO THE END OF THE URL. The problem with PAN OS is that it doesn't do URL rewrites, so we'd have to add a separate web proxy to our network and reroute all web traffic through it before heading out the PAN - if a user tacks on the &edufilter text, YouTube doesn't include it in any of its link URLs. Yes, we could watch a generic "education" channel, however YouTube EDU allows a school to customize the list of what they consider to have merit, rather than rely on a single body to decide what is appropriate for everything from K-12 to PhD students under one umbrella "/education" channel that could be easily dealt with by the PAN.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!