Blocking YouTube for Specific Users in a Network

[darkl0rd]

Dear Team,

I would like to know, if it's possible to bock certain users to access YouTube and allow the rest. If this is not possible with ApplicationControl, which module is the right one to chose.

Thanks & Regards,
Sal

[jcoffin]

Use Policy Manager to create two racks, Youtube allowed rack and another with Youtube blocked using Webfilter. Create a Policy rule to select users to the correct rack.

[srigby]

Use Policy Manager to create two racks, Youtube allowed rack and another with Youtube blocked using Webfilter. Create a Policy rule to select users to the correct rack.

Interesting topic - blocking / allowing YouTube access by user.

What about by site? Is it possible to whitelist certain YouTube sites and block the others?

Thanks...

[darkl0rd]

Thanks JCoffin , will try and update.

Thanks,
Sal

[Aamir]

Hi ,
But youtube is https so by blocking category of video streaming is not blocking youtube. i think we need https inspector and then Web filter or app control both can work.
Can it work without ssl inspector???

[darkl0rd]

SSL inspector is not required. Application Control can do the job.

Thanks,
Sal

[jcoffin]

What about by site? Is it possible to whitelist certain YouTube sites and block the others?

If you want to block by specific URL, SSL Inspector is required. It will be necessary all a block for all youtube and then add specific URLs to the pass list. This is probably going to be labor intensive if there are many URLs allowed.

[darkl0rd]

So guys i used the policy manager with app control and it works. Thanks Jcoffin.

Thanks,
Sal

[srigby]

If you want to block by specific URL, SSL Inspector is required. It will be necessary all a block for all youtube and then add specific URLs to the pass list. This is probably going to be labor intensive if there are many URLs allowed.

Thanks for the tip.

My daughter's school website includes some links to YouTube URLs, so I can't just do a blanket block.

Since I'm on the firmware distro, I might wait until 12.2 for better memory management and then give it a shot. Although, seems resource intensive - inspecting all SSL traffic just so you can pass a few URLs.

[dmorris]

you don't need SSL inspection to just block or pass the whole domain.
You need SSL inspection to block *specific* uris within the domain. The domain can passed or blocked from the cert or SNI information without ssl inspection.

approaches discussed here:

https://wiki.untangle.com/index.php/HTTPS

If you are asking
"Is it possible to whitelist certain YouTube sites and block the other [youtube sites]?"
Then the answer is you need SSL Inspection.

If you are asking
"Is it possible to whitelist certain YouTube URLS and block the rest of youtube?"
Then the answer is you need SSL Inspection.

If you are asking
"Is it possible to whitelist YouTube and block the other [domains]?"
Then the answer is you do not need SSL Inspection.

[srigby]

you don't need SSL inspection to just block or pass the whole domain.
You need SSL inspection to block *specific* uris within the domain. The domain can passed or blocked from the cert or SNI information without ssl inspection.

approaches discussed here:

https://wiki.untangle.com/index.php/HTTPS

If you are asking
"Is it possible to whitelist certain YouTube sites and block the other [youtube sites]?"
Then the answer is you need SSL Inspection.

If you are asking
"Is it possible to whitelist certain YouTube URLS and block the rest of youtube?"
Then the answer is you need SSL Inspection.

If you are asking
"Is it possible to whitelist YouTube and block the other [domains]?"
Then the answer is you do not need SSL Inspection.

Thanks for the clarification. I need SSL Inspection :-)

Just to be even clearer. Is SSL inspection confined just to a / or multiple domains - or all SSL sessions?

[dmorris]

You can configure it to inspect whatever you like with the rules.