YouTube Safe Search Enforcement not working for HTTP/2 connection
12004
Created On 06/16/20 14:44 PM - Last Modified 06/16/20 14:46 PM
Symptom
When enabling Safe Search Enforcement it doesn't work when HTTP/2 is used.
Environment
PAN-OS 9.1 and below.
Cause
PAN-OS supports safe search enforcement for YouTube through HTTP header insertion. HTTP header insertion is not currently supported for HTTP/2.
Resolution
To enforce safe search for YouTube, downgrade HTTP/2 connections to HTTP/1.1 using the 'Strip ALPN' feature of the appropriate decryption profile".