Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Block YouTube

Hello All,

I wondering if anyone has a proper method of blocking YouTube.

I have and SG125 and I simply want to put time limits of the YouTube viewing.

But no matter what I do ... it never seems to work correctly.  One device works, the other does not. 

I have my devices set with DHCP reservations and static Names so I know the devices get the same IP's

Support gave me these expressions (see pic) ... But i'm still fighting the battle.

URL filtering Only is selected.  Should I be using De crypt and Scan?

Any help is appreciated.  I've called support a few times and spent hours on the phone with them.  Its seems like such an easy request.

Thanks 

Chris

 



This thread was automatically locked due to age.
Parents
  • If you don't see the YouTube accesses in the Web Filtering log file, then the traffic is going via UDP 443.  I believe you need only block that traffic outbound with a Firewall rule.  That will, as Sachin said, force the Google servers to communicate with TCP 443.  Please tell us if you also had to select 'Decrypt & scan' to make your block work.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Something like this?

    I created a service for UDP over 443

    Then I created a a firewall rule at the top.  I selected all my Internal Networks as sources and the Destination is Internat IPv4/IPv6. The Action is Drop.

    I have not yet enabled it.  Wanted to bounce this off you 1st.

     

     

    Chris

  • Looks good, Chris!

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply Children
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?