web-browsing application basic question

[LCMember1381]

Hello.

I have PANOS 4.1

Can somebody explain to me why when i permit folowing applications (clearspace, flash, ftp, google-maps, google-translate, ssl, web-browsing) on application-default serwice  in policy from zone trust to untrust in rule1 the youtube-base is also permited on the same rule (seen in logs as permited on that rule) ? shouldn't it have been blocked ?

And for excample google-maps i have to permit explicity to work.

Both youtube-base and google-map are web-browser dependent (ssl for google map has ben permited too) ?

[rmonvon]

Hi...Did you test by visiting youtube and request some contents?  Do you get block or allow and what shows up in the traffic log?

Thanks.

[LCMember1381]

Yes i have tryied to open video on youtube. Access to youtube in log is recordised as "youtube-base". ANd the rule that do not explicity permit the "youtube-base" only web-browsing and flash and some others but not youtube-base.

[mikand]

Since you have limited amount of rules I would try going through the applications one by one to see which one it is thats also allowing youtube.

A guess is that "web-browsing" is the general app for all kind of browserbased browsing which means that youtube and others are "included" within this app.

[rmonvon]

I would suggest that you contact Support and have your rules reviewed.  Thanks.