Solved

SonicWall content filtering youtube

Posted on 2013-11-24
10
10,401 Views
1 Endorsement
Last Modified: 2015-06-29
I am blocking multimedia on a SonicWall using Content Filtering Service. I have created an exception for youtube.com. Users can now get to youtube.com  now but they can't play videos. I verified the videos have a youtube.com url.

If I don't block multimedia, youtube works.

Any idea why users can get to youtube but not play videos?
1
Comment
Question by:ajdratch
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 1

Expert Comment

by:alexziv
ID: 39672948
try to unblock multimedia than
0
 

Author Comment

by:ajdratch
ID: 39672962
I know that will allow usres to play youtube videos. The point is I want to block all multimedia except youtube
0
 
LVL 1

Expert Comment

by:alexziv
ID: 39672985
youtube is multimedia, unless you do an extra work on your router to ban for exactly user you want.
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 25

Expert Comment

by:Diverse IT
ID: 39673088
Hi ajdratch,

Are you using App Control as well?

Content Filtering Service (CFS) works on the domain level (URL based), however, many sites have external content being delivered dynamically by external domains. For example, bing.com has outlook.com, live.com and msn.com all delivering content...therefore if you do not whitelist those domains part or all of the bing.com site will not function properly.

The same is true with youtube.com. Vet external domains and add them to the whitelist.

You need to also add to the whitelist the following domains:
1. google.com
2. googleusercontent.com
3. googlevideo.com
4. gstatic.com
5. ytimg.com
Let me know if you have questions!
0
 

Author Comment

by:ajdratch
ID: 39673124
Not using app control. As I mentioned in the original post -  verified the videos have a youtube.com url.
0
 
LVL 25

Accepted Solution

by:
Diverse IT earned 500 total points
ID: 39673144
You need to re-read my last post (http:#a39673088). I'm telling you that you cannot simply whitelist youtube.com because youtube.com uses other external domains to provide content, which I have listed below.

In addition to adding youtube.com, add these domains to the Allowed Domains list and you will be able to watch videos on youtube.com:
1. google.com
2. googleusercontent.com
3. googlevideo.com
4. gstatic.com
5. ytimg.com
3
 

Author Closing Comment

by:ajdratch
ID: 39673175
That did it, thanks
0
 
LVL 25

Expert Comment

by:Diverse IT
ID: 39673178
No problem...my pleasure. I'm glad I could help and thanks for the points!
0
 

Expert Comment

by:kmiller_ots
ID: 40042927
That worked for me as well.  Thank you.  How did you find the list of sites that needed to be added?
0
 
LVL 25

Expert Comment

by:Diverse IT
ID: 40858815
@kmiller_ots - Sorry I didn't see your post til now. Since web 2.0 and the surge of Content Delivery Networks/Content Distribution Networks (CDN) websites are imbedding multiple URIs now. Therefore, the act of simply whitelisting is becoming more and more complicated; especially if the websites are using Ad Servers to deliver objects like CSS or imagery/video, etc. so they can track with further analytics. It's painful but you can use dev tools in any modern browser to source all the URI's that a website uses. Additionally, there are some online tools as well you can search for. Hope that helps.
2

Featured Post

How to Defend Against the WCry Ransomware Attack

On May 12, 2017, an extremely virulent ransomware variant named WCry 2.0 began to infect organizations. Within several hours, over 75,000 victims were reported in 90+ countries. Learn more from our research team about this threat & how to protect your organization!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to send commands to switch via telnet programatically 15 83
X.509 Cert Upload to Cisco WAP 6 55
Wannacry 44 93
Basic nexus configuraton 10 16
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question