Youtube doesn't get blocked

Question

I have added a policy source>LAN, any service and network, destination>WAN, any network; no user identity, Accept all traffic, and applied a custom web filter policy which among other categories, denies https and http traffic on Video hosting and Social Networking. Users cannot access Facebook or other social networking sites but they CAN access Youtube. 
 Would anyone please suggest what could cause this? 
 thanks in advance.

sachingurung · Accepted Answer

Amazing, now check what is the Web Filter and Application Filter defined in the Rule ID 5. Go to the defined Web Filter and verify that YouTube is blocked under single category and not allowed through a different category. You can also deny YouTube streaming through Application Filter. 
 Finally, go to System > Diagnostics > Services > Web proxy> restart. 
 Thanks

AlauddinSiddiqi · Answer

It seems that restarting the service did the trick. 
 Thanks for the replies.

Renz Nucup · Answer

yes it will for a short period of time... after few minutes the portal will load again. you can block it thru application filter though.... but it more presentable to have it redirected to the block portal rather than get hsts error or broken youtube portal. lol 
 
 Here's a solution from Luk of getting a broken youtube portal and promted for HSTS error instead: 
 If you are using Chrome make sure to block port UDP 443 so traffic will be correctly filtered by XG. 
 Youtube/ Google/apps related to google uses QUIC protocol that would operate on UDP : 443. 
 Create a top rule where you block UDP 443 from LAN to WAN and traffic will be switched to TCP and XG will do the filtering. 
 Regards 
 
 Luk 
 UTM Certified Architect - XG Certified Architect 
 https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/83944/how-to-block-youtube-without-blocking-other-sites?pi2132219849=65

Sufyan Mansuri · Answer

Hi All Members , 
 here some web-filter URL'S for purely block YouTube in PC & Mobile Device's. 
 Create Custom Web-Filter in Web->Categories->Add-> 
 Web-filter-Name=>YouTube-Block 
 Classification=>Productive 
 Configure Category=>Local 
 in a Domain Section add Below URL:- 
 -> www.youtube.com 
 -> i.ytimg.com 
 -> googlevideo.com 
 -> r3---sn-cvh76nez.googlevideo.com 
 -> android.clients.google.com 
 -> ssl.google-analytics.com 
 -> safebrowsing.googleapis.com 
 -> spoc-pool-gtm.norton.com 
 -> reports.crashlytics.com 
 -> yt3.ggpht.com 
 -> connectivitycheck.gstatic.com 
 -> googleusercontent.com 
 -> c.docs.google.com 
 -> edgestatic.com

in a Keyword Section add Below URL:- 
 -> youtube 
 -> googlevideo 
 
 and click SAVE button. 
 
 see screenshot for more idea!

Deepak Verma · Answer

Hi, 
 By default In Chrome Browser, Google is using "QUICK" protocol so Web filter will not effective without blocking "QUICK" protocol under the Firewall Policy.

Sufyan Mansuri · Answer

Hello Ricky , 
 Gmail Working Properly After Applying My Web-Filter Settings. i think you need to verify your app-control settings are ok ! with YouTube Streaming Category Block. and also Select Check Mark on (QUIC) Protocol Under Firewall Rules.