Youtube doesn't get blocked

Alauddin,

can you share your Policy Rule Screenshots?

Thanks

Hi Alauddin,

Can you verify from which rule id the traffic is forwarded? You can check that through packet capture in XG. Refer this, https://community.sophos.com/kb/en-us/123189 .

Thanks

Rule ID 5 is what is shown in packet capture, applied to the traffic coming from LAN interface (source).

Amazing, now check what is the Web Filter and Application Filter defined in the Rule ID 5. Go to the defined Web Filter and verify that YouTube is blocked under single category and not allowed through a different category. You can also deny YouTube streaming through Application Filter.

Finally, go to System > Diagnostics > Services > Web proxy> restart.

Thanks

Alaiddin,

Can You change any services to only http/https?

Make sure proper web/app filters are applied

It seems that restarting the service did the trick. 

Thanks for the replies.

Does restarting the proxy server effect other policy?

Hi Miljohn,

No, it will not affect any policy changes.

Thanks

yes it will for a short period of time... after few minutes the portal will load again. you can block it thru application filter though.... but it more presentable to have it redirected to the block portal rather than get hsts error or broken youtube portal. lol

Here's a solution from Luk of getting a broken youtube portal and promted for HSTS error instead:

If you are using Chrome make sure to block port UDP 443 so traffic will be correctly filtered by XG.

Youtube/ Google/apps related to google uses QUIC protocol that would operate on UDP : 443.

Create a top rule where you block UDP 443 from LAN to WAN and traffic will be switched to TCP and XG will do the filtering.

Regards

Luk

UTM Certified Architect - XG Certified Architect

https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/83944/how-to-block-youtube-without-blocking-other-sites?pi2132219849=65