URL FILTERING

[Edluna]

dear engineers.
could you help me!!

I have the following problem with the URL filter:

I commented that I have blocked the streaming media category in which enters youtube

when I open firefox without any problem with the rule applies both http and https.
But when I open the page with chrome does not apply the rule.

I can do help me !!!

[Raido_Rattameister · Accepted solution]

Chrome might use quic as application.

Try what happens if you block that in your sec policy.

[reaper · Accepted solution]

besides blocking Quic, you will also need to make sure SSL decryption is enabled

youtube uses SSL by default on a certificate from it's parent company google, so without SSL decryption, the only information available is the common name in the certificate, which is *.google.com

[Remo · Accepted solution]

Actually it should be possible for the firewall (depending on the PAN-OS Version) to see www.youtube.com (even without decrypting the connection) in the SNI extension of the ssl-handshake

[reaper · Accepted solution]

you're right! i forgot about SNI there for a second 🙂

ok, must be 'quic' thats enabled by default in chrome 😉

[Edluna]

Apply the protocol blocking google youtube quic and everything was blocked.
I also discovered that you can disable the protocol from chrome.

thank you very much.