How to block www.youtube.com completely

[imran_sharin]

Dear All,

Appreciate if you can advise how to block www.youtube.com completely. I have try using URL-Filtering and application layer level but still failed. I am using PA-3020 OS version 7.0.3

Imran

[TranceforLife]

Hi Imran,

Is it http or https traffic? Please confirm. SSL decryption might be required 

[Roby_Sreejith]

In ur filtering block list, try adding *.youtube.com

[Raido_Rattameister]

Enable SSL decryption as some Youtube traffic can be identified as SSL.

Drop youtube application.

Add *.youtube.com and youtube.com to URL profile blacklist.

Block quic application as Chrome accesses Google services over quic that is UDP based.

And if this all fails then try to deny any traffic that firewall can't decrypt with ssl decryption profile.

[imran_sharin]

 I want to block, I want to block all http and https traffic... is there need to perform SSL description.. appreciate if you can teach me to do that.. 🙂

[Raido_Rattameister · Accepted solution]

If you don't decrypt https then firewall uses data on the certificate.

It can't see what is inside encrypted payload.

If computers behind firewall are under your control (you can install additional root certificates) then it is an option. If it is kind of university environment where students come with their own laptops then you can't do ssl decryption.

More info here:

https://live.paloaltonetworks.com/t5/Management-Articles/SSL-decryption-resource-list/ta-p/70397

[imran_sharin]

Hi Raido,

Can you teach me how to do SSL decryption... sorry if my question is too novice for you..

[imran_sharin]

Hi Raido,

TQVM... much appreciate your help 🙂

[Raido_Rattameister]

Check the link I gave you earlier and ask when you are stuck.