Youtube doesn't get blocked

Alauddin,

can you share your Policy Rule Screenshots?

Thanks

Hi Alauddin,

Can you verify from which rule id the traffic is forwarded? You can check that through packet capture in XG. Refer this, https://community.sophos.com/kb/en-us/123189 .

Thanks

Rule ID 5 is what is shown in packet capture, applied to the traffic coming from LAN interface (source).

Amazing, now check what is the Web Filter and Application Filter defined in the Rule ID 5. Go to the defined Web Filter and verify that YouTube is blocked under single category and not allowed through a different category. You can also deny YouTube streaming through Application Filter.

Finally, go to System > Diagnostics > Services > Web proxy> restart.

Thanks

Alaiddin,

Can You change any services to only http/https?

Make sure proper web/app filters are applied

It seems that restarting the service did the trick. 

Thanks for the replies.

It seems that restarting the service did the trick. 

Thanks for the replies.

Does restarting the proxy server effect other policy?

Hi Miljohn,

No, it will not affect any policy changes.

Thanks

yes it will for a short period of time... after few minutes the portal will load again. you can block it thru application filter though.... but it more presentable to have it redirected to the block portal rather than get hsts error or broken youtube portal. lol

Here's a solution from Luk of getting a broken youtube portal and promted for HSTS error instead:

If you are using Chrome make sure to block port UDP 443 so traffic will be correctly filtered by XG.

Youtube/ Google/apps related to google uses QUIC protocol that would operate on UDP : 443.

Create a top rule where you block UDP 443 from LAN to WAN and traffic will be switched to TCP and XG will do the filtering.

Regards

Luk

UTM Certified Architect - XG Certified Architect

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/83944/how-to-block-youtube-without-blocking-other-sites?pi2132219849=65

Hi All Members,

here some web-filter URL'S for purely block YouTube in PC & Mobile Device's.

Create Custom Web-Filter in Web->Categories->Add->

Web-filter-Name=>YouTube-Block

Classification=>Productive

Configure Category=>Local

in a Domain Section add Below URL:-

-> www.youtube.com

-> i.ytimg.com

-> googlevideo.com

-> r3---sn-cvh76nez.googlevideo.com

-> android.clients.google.com

-> ssl.google-analytics.com

-> safebrowsing.googleapis.com

-> spoc-pool-gtm.norton.com

-> reports.crashlytics.com

-> yt3.ggpht.com

-> connectivitycheck.gstatic.com

-> googleusercontent.com

-> c.docs.google.com

-> edgestatic.com

in a Keyword Section add Below URL:-

-> youtube

-> googlevideo

and click SAVE button.

see screenshot for more idea!

hy sufyan,

I'd already try it, but gmail still blocked too, is there any idea how to block only youtube not gmail and others site ????

Hi,

I would suggest you investigate adding an application policy as well to your firewall rule.

Ian

Hello Ricky,

Gmail Working Properly After Applying My Web-Filter Settings. i think you need to verify your app-control settings are ok! with YouTube Streaming Category Block. and also Select Check Mark on (QUIC) Protocol Under Firewall Rules.