We want to allow youtube edu videos for everyone on our network, but still block youtube for students. Youtube has a set up walkthrough that helps, but I need some assistance thinking this through. So any assistance would be helpful. I have posted the directions below...
In order to access YouTube for Schools you will likely need help from your school's network administrator so please share this information with him or her. This sign up process should only take minutes! Before you begin, make sure your school meets the following requirements:
Follow the three steps below and your school will have access to thousands of free educational videos in minutes. Once you are finished with the set-up be sure to read our our additional resources listed at the end of this page.
Choose one of the following two options, depending on which works for your school's network:
Ensure the following top-level domains are not blocked:
Your network should now be able to access the YouTube for Schools version of YouTube.com. You can grant unrestricted access to additional YouTube accounts (such as teachers) and approve additional videos for viewing in your school.
Last I read was that PA was going to plan to release the URL rewrite as many of the EDU environments have put in a request for that function. But I've seen no news of this since last. If you search for enforce safe search there are documents to do this for PANos 4.1 but it is not perfect. At this point I'm thinking of setting up an squid box to dod the rewrite. As there has been little interest from PA to do this. Yet there competitors can do it.. I love the firewall and its features but this has been a thorn in my side.
Hey, I think I'm pretty close to a solution but I'm running into a problem. What I did was put a specific rule for Youtube the application. URL custom category for youtube.com to block. Then I have an allow list which takes each tokent (you tube .com /&blah education). On the response page I have an automatic redirect which takes the <url /> Field and appends the education component to it. The problem is it recursively redirects.
I urge Palo Alto to address this as soon as possible. I am the Network Admin for a private HS we could really use it. We deployed laptops to freshmen and have NO books. Our entire delivery system is through the device. Teachers use Youtube extensivly but students abuse the privelage. Currently I have to block Youtube for all stuidents and have teachers run the videos on the projector for in class and students access youtube from home openly.
Makes it hard for the journalism and broadcasting classes.
This functionality will likely only be available for customers who have migrated to PANDB and even then i would suggest this would only be for things like SAFESEARCH .. things like YouTube for EDU will likely not be supported anytime soon .. our deployment is about 50K users spread over 100 virtual systems and we realised very early on that for anything that requires a rewrite it would need to be done off-box (we use F5)
Here are some of our code-snippets
We have been asking for this feature since we migrated to PA from Websense, which had it. We had been using Youtube Safety mode instead, not perfect but better than nothing, and now that is not working since the Google merge. We need this functionality! We are a K3-12 school district. Hope it will come soon.
Why doesn't this post get a response from PA? Not just a moderator, some one with some impact that can really answer to this issue. It's not like an issue that has not been addressed in the security world, other companies have addressed and resolved it. PA needs to give this some serious attention.
How about it Palo Alto?
For now we are using a workaround that sends youtube traffic through a proxy so we can do a url-rewrite. We use a pac file for students that is applied via gpo. That pac file then drops all traffic locally except for the youtube traffic which is sent to a squid proxy server. In squid you can do a url-rewrite with a perl script. Its a big band-aid but it works for now.
I agree with MemphisBrothers - not sure why this hasnt been responded to.
I'm a representative from Palo Alto Networks, and have been following this thread. Please know that we are monitoring these forums, and posts/requests like this do not go unnoticed. For those of you that would like to add your input for a feature request, I would suggest that you communicate with your SE or Sales representative so that we can accurately capture all components of your request. We cannot discuss roadmap items - whether they be additions or existing items - on these forums.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!