Solved

SonicWall content filtering youtube

Posted on 2013-11-24
10
9,785 Views
1 Endorsement
Last Modified: 2015-06-29
I am blocking multimedia on a SonicWall using Content Filtering Service. I have created an exception for youtube.com. Users can now get to youtube.com  now but they can't play videos. I verified the videos have a youtube.com url.

If I don't block multimedia, youtube works.

Any idea why users can get to youtube but not play videos?
1
Comment
Question by:ajdratch
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 1

Expert Comment

by:alexziv
ID: 39672948
try to unblock multimedia than
0
 

Author Comment

by:ajdratch
ID: 39672962
I know that will allow usres to play youtube videos. The point is I want to block all multimedia except youtube
0
 
LVL 1

Expert Comment

by:alexziv
ID: 39672985
youtube is multimedia, unless you do an extra work on your router to ban for exactly user you want.
0
 
LVL 24

Expert Comment

by:diverseit
ID: 39673088
Hi ajdratch,

Are you using App Control as well?

Content Filtering Service (CFS) works on the domain level (URL based), however, many sites have external content being delivered dynamically by external domains. For example, bing.com has outlook.com, live.com and msn.com all delivering content...therefore if you do not whitelist those domains part or all of the bing.com site will not function properly.

The same is true with youtube.com. Vet external domains and add them to the whitelist.

You need to also add to the whitelist the following domains:
1. google.com
2. googleusercontent.com
3. googlevideo.com
4. gstatic.com
5. ytimg.com
Let me know if you have questions!
0
 

Author Comment

by:ajdratch
ID: 39673124
Not using app control. As I mentioned in the original post -  verified the videos have a youtube.com url.
0
New My Cloud Pro Series - organize everything!

With space to keep virtually everything, the My Cloud Pro Series offers your team the network storage to edit, save and share production files from anywhere with an internet connection. Compatible with both Mac and PC, you're able to protect your content regardless of OS.

 
LVL 24

Accepted Solution

by:
diverseit earned 500 total points
ID: 39673144
You need to re-read my last post (http:#a39673088). I'm telling you that you cannot simply whitelist youtube.com because youtube.com uses other external domains to provide content, which I have listed below.

In addition to adding youtube.com, add these domains to the Allowed Domains list and you will be able to watch videos on youtube.com:
1. google.com
2. googleusercontent.com
3. googlevideo.com
4. gstatic.com
5. ytimg.com
3
 

Author Closing Comment

by:ajdratch
ID: 39673175
That did it, thanks
0
 
LVL 24

Expert Comment

by:diverseit
ID: 39673178
No problem...my pleasure. I'm glad I could help and thanks for the points!
0
 

Expert Comment

by:kmiller_ots
ID: 40042927
That worked for me as well.  Thank you.  How did you find the list of sites that needed to be added?
0
 
LVL 24

Expert Comment

by:diverseit
ID: 40858815
@kmiller_ots - Sorry I didn't see your post til now. Since web 2.0 and the surge of Content Delivery Networks/Content Distribution Networks (CDN) websites are imbedding multiple URIs now. Therefore, the act of simply whitelisting is becoming more and more complicated; especially if the websites are using Ad Servers to deliver objects like CSS or imagery/video, etc. so they can track with further analytics. It's painful but you can use dev tools in any modern browser to source all the URI's that a website uses. Additionally, there are some online tools as well you can search for. Hope that helps.
2

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Outsource Your Fax Infrastructure to the Cloud (And come out looking like an IT Hero!) Relative to the many demands on today’s IT teams, spending capital, time and resources to maintain physical fax servers and infrastructure is not a high priority.
Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now