Block streaming media for sports only

[JustMike]

Hello,

We have received a request to block streaming media only for the sports category.  Is that possible and how would we go about doing that?

We have a PA-3020 running software version 7.06

thank you

mike

[Raido_Rattameister · Accepted solution]

URL categorization does not go that specific.

There is 'streaming-media' category that covers all streaming media.

You can try what category 'sports' give you but this is rather everything about sports.

[HULK]

Hello Mike,

Just FYI few more related discussions: 

https://live.paloaltonetworks.com/t5/General-Topics/blocking-media-streaming-and-chatting/m-p/42068/...

If you have specific list of URL's you may also considor this: Apply QoS for Youtube and streaming media

https://live.paloaltonetworks.com/t5/Configuration-Articles/Apply-QoS-for-Youtube-and-streaming-medi...

Thanks

HULK

[gwesson]

Probably the most effective way to do this would be to create an Application Filter (Objects tab > Application Filters > Add) and give it a name like "Video Streaming". I do this for my at-home QoS policy (though I'm making it faster instead of blocking it =P)

Create a security rule with the Sports category in the rule itself, the Video Streaming application filter you created above, and an action of Deny.

This should be skipped when a normal sports web page is pulled up, but any application that matches the filter will be blocked when on a sports page.

Note: I have not tested this, so I don't know if it'll break other stuff. You'll want to test it with your own client before implementing it site-wide.

edit: My rules don't normally include categories in the rules themselves, so that column isn't present in my screenshot. Sorry about that!

Screenshot of what I wrote in app filter and security rule:

[JustMike]

Thanks for the reply.  We really don't have specific URLs in mind. 

[JustMike]

Thanks!  I will play around with that a bit and let you know how it goes. 

[JustMike]

I have been a bit remiss on relaying the results back, my apologies. It would appear Raido was correct. Creating the application filter works, but only if the url is categorized as sports. So it worked for the majority of sites, but the request to block all sports related streaming media was a bit unrealistic.  

Thanks again to all that replied!