blocking streaming

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

blocking streaming

L1 Bithead

Is it possiblt to block all streaming sites without URL filtering?

 

Im looking to stop things like iplayer and basically all streaming as if using up a lot of bandwidth, yjinkgs like iplayer.

It looks like its showing up as ssl traffic on the firewall.

 

 

4 REPLIES 4

Cyber Elite
Cyber Elite

Hello,

URL filtering is a good step if you can. For sites that use SSL, you would have to perform SSL decription and then block the traffic at the application layer.

 

Hope that makes sense.

 

Regards,

Cyber Elite
Cyber Elite

@Buccaneer

I'm assuming that you simply don't have a URL Filtering license, which is why you can't utilize URL Filtering? If that's the case you can still create custom URL Categories and utilize that category without the license, if you do it right it should work for the most part. Then you simply build out a URL Filtering profile that blocks that custom category. I can send you the list of streaming services that I already have built out for situations like this if you want to utilize that as a starting point. 

Hi there

The lack of licence is the main issue, up until now I didnt know I needed it until.  Im guessing is since BBC iplare changed to requiring a logon that ssl became an issue.  We only use this set of firewalls for an offshore project once a year for about two months so as its all offshore its not the time to change the licences.

 

A list of streaming services to get started would be appreciated as bandwidth is charge by the MB.

 

Thanks  

So I made an application-group that includes the app-ids below.

<entry name="Streaming Services">
              <members>
                <member>air-video</member>
                <member>amazon-cloud-player</member>
                <member>amazon-instant-video</member>
                <member>amazon-unbox</member>
                <member>directv</member>
                <member>hulu</member>
                <member>naver-streaming</member>
                <member>netflix</member>
                <member>netflix-base</member>
                <member>netflix-streaming</member>
                <member>ontv</member>
                <member>pandora-tv</member>
                <member>plex</member>
                <member>popcorn-time</member>
                <member>redbox-instant</member>
                <member>sbs-netv</member>
                <member>sling</member>
                <member>twitch</member>
                <member>tvb-video</member>
                <member>tv4play</member>
                <member>streambox</member>
                <member>xfinity-tv</member>
              </members>

Then we did the actual URL Filtering side of things that included all of these. 

<entry name="Streaming Test">
                <list>
                  <member>amazon.com/Amazon-Video</member>
                  <member>directv.com/tv</member>
                  <member>directvnow.com</member>
                  <member>freeetv.com</member>
                  <member>hulu.com</member>
                  <member>megavideomovies.com</member>
                  <member>mlb.tv</member>
                  <member>naver.com</member>
                  <member>streaming.naver.com</member>
                  <member>nextmedia.com</member>
                  <member>*.directv.com</member>
                  <member>ontveg.com</member>
                  <member>pandora.tv</member>
                  <member>plex.com</member>
                  <member>plex.tv</member>
                  <member>popcorn-time.to</member>
                  <member>popcorntime-online.tv</member>
                  <member>popcorntime.sh</member>
                  <member>live.qq.com</member>
                  <member>qq.com</member>
                  <member>sling.com</member>
                  <member>twitch.tv</member>
                  <member>tv4play.se</member>
                  <member>my.xfinity.com</member>
                  <member>netflix.com</member>
                  <member>*.netflix.com</member>
                  <member>https://plex.tv</member>
                  <member>sling.com</member>
                  <member>https://sling.com</member>
                  <member>go90.com</member>
                  <member>www.go90.com</member>

FYI,

Just looking at BBC's iPlayer now and I don't know how easy this is going to be to actually block if you aren't utilizing SSL decryption. The main issue being that the URL is still bbc.co.uk; you may be able to block iplayer-webv.files.bbci.co.uk to actually get it to stop loading, but I've never tried since BBC isn't that widely utilized in the US. 

  • 3127 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!