Blocking videos for a special url category

[panos]

Hi,

We know that url category only works with http and https.So if we want to block all videos(http-video,flash,youtube videos) for a url category(for example social-networking),  can we do this with PaloAlto ?

(with custom signatures or anyhting else)

[hyadavalli]

Hello Panos,

You can do that by creating an application filter with blocking category:Media and sub-category:photo-video.

Hope this is what you are looking for.

Regards,

Hari Yadavalli

[panos]

that will not work for only 1 url category.

[hyadavalli]

May be I understood your question wrong.

So, you just want to block videos for a particular url filtering caetgory, is that right?

Regards,

Hari Yadavalli

[panos]

yes that is right.I don't know if it is possible.Because for that url category sites there are maybe youtube videos for example.But we don't want to block youtube in general

[VinceM · Accepted solution]

Hi PanOs

For me, you can't do that easilly ..

Because as you said, url cat is just for Http and Https and most often, when you read a video enbeded in a web site, traffic is not seen as http(s) but as an application flow.

Like for youtube, if you block youtube url cat, you block all access to youtube web site

If you block youtube app, you block video flows in youtube.

Mean there there is no URL cat for video traffic ....

Maybe possible to do that whith custom app but site per site because in  custom app you can't use url cat ...

Hope clear

V.

[tasonibare]

panos,

You can combine an application filter for streaming media along with the URL category you want to block in a single security policy and then deny any traffic matching these criteria.

Perhaps that would help achieve what you're looking for.

Below is an example of such configuration:

Regards,

tasonibare

[panos]

this will not work because url category is only for http/https traffic.

Thanks