Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 43 replies
  • Subscribers 36 subscribers
  • Views 119746 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Youtube and ADS - Sometimes they are not blocked

lferrara

Coming from UTM, I never had issue on youtube ADS. Since v15 if you listen to a playlist or you watch multiple videos inside youtube website, ads appear sometimes.

In my web filter policy, of course, ADS are blocked (I hate them).

Anyone is experiencing this issue/behaviour?

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    Hi Luk,

    Just to confirm are you using Decrypt and Scan HTTPS?

    Emile

  • 0 in reply to Emile Belcourt

    Thanks Emile. I was not using HTTPS scanning on UTM and even on XG. I reinstalled UTM on a VM and youtube ads never appear while using XG, sometimes they come out.

    Really sad!

  • 0 in reply to lferrara

    I noticed similar behavior with youtube and I don't use decrypt and scan either. I didn't research it too much but I have noticed that there is some categorization discrepancies between UTM9 and XG. Here is one example...

    While XG offers many categories, some items are categorized wrong and there are many items are under "Dynamic DNS & ISP Sites" category that don't make any sense.

    I don't know why sophos doesn't take what has already worked in UTM9 and use it for XG. They keep on reinventing stuff... look at the MTA, they brag about it as one of the great new features in XG that brings it closer to UTM9. Are they kidding me? UTM9 has a full function MTA server while XG has a very basic MTA that is nowhere as capable as UTM9. Why don't they use Exim from UTM9 that has worked for years? I give up[:D]

    Regards
    Bill

  • 0 in reply to lferrara

    Hi Luk,

    For the past half an hour I've just been playing with the XG and have found some interesting things:

    • If I set a deny all Web policy on the XG for my firewall rule I'm going out on Youtube is allowed on Google Chrome but blocked on IE
    • To block Youtube on Google Chrome I had to physically enable any application filtering policy which is crazy. It was very odd in Chrome, Youtube wasn't even coming up in the logs when I was browsing, wizardry is afoot when browsing Youtube in Chrome
    • Advertisements were not being blocked no matter what because after examination of the advertisements in packet streams and via the web filtering the ads are actually youtube.com site paths like /pageads, /annotations_invideo, /api/stats/ads which means the way the XG does categorisation means it cannot examine the site path. I'm very curious as to how the UTM did this now
    • I create an Application Filtering policy that denies everything by default and I only allow Youtube Website, Youtube Search and Youtube Streaming i get some interesting results. The ads are blocked ish but only the content of the ad, I still get the pop up but only random ones are blocked and some are getting through. Methinks Youtube has some magic wizardry going on here to bypass scanning like this

     

    Right now I'm try to find some way of entering paths into the XG as areas for blocking but I'm coming up at dead ends. What I need is the ability to block websites based on Regular Expressions!

    Hi BillyBob,

    What features are missing from the XGs MTA that are in the UTM?

    I find the MTA server in the XG to be far more advanced and granular than the systems employed in the UTM if not on the same level of.

    Emile

  • 0 in reply to Billybob

    Billybob said:

     

    I don't know why sophos doesn't take what has already worked in UTM9 and use it for XG. They keep on reinventing stuff... look at the MTA, they brag about it as one of the great new features in XG that brings it closer to UTM9. Are they kidding me? UTM9 has a full function MTA server while XG has a very basic MTA that is nowhere as capable as UTM9. Why don't they use Exim from UTM9 that has worked for years? I give up[:D]

    Regards
    Bill

     

    [:#]

    Bob, we can add your question to "long list" of unanswered questions. Even the crying face emoticon disappeared on this community. Just crying....

    Saschin, AlanT are you there to give us more info about those big differences between XG and UTM? I never had any issue on Youtube website and Ads....

    Still a lot of work in Sophos Development House!

Reply
  • 0 in reply to Billybob

    Billybob said:

     

    I don't know why sophos doesn't take what has already worked in UTM9 and use it for XG. They keep on reinventing stuff... look at the MTA, they brag about it as one of the great new features in XG that brings it closer to UTM9. Are they kidding me? UTM9 has a full function MTA server while XG has a very basic MTA that is nowhere as capable as UTM9. Why don't they use Exim from UTM9 that has worked for years? I give up[:D]

    Regards
    Bill

     

    [:#]

    Bob, we can add your question to "long list" of unanswered questions. Even the crying face emoticon disappeared on this community. Just crying....

    Saschin, AlanT are you there to give us more info about those big differences between XG and UTM? I never had any issue on Youtube website and Ads....

    Still a lot of work in Sophos Development House!

Children
No Data