Error:
An unexpected error occurred. Please click Reload to try again.
Error:
An unexpected error occurred. Please click Reload to try again.
Allowed YouTube Video Does Not Stream - Knowledge Base - Palo Alto Networks

Allowed YouTube Video Does Not Stream

14697
Created On 04/18/20 02:18 AM - Last Modified 07/02/20 18:29 PM


Symptom


  • All "streaming-media" is blocked by the URL filtering profile in security policy.
User-added image
 
User-added image
  • "streaming-media" application is being decrypted.

Policies--> Decryption:
 
User-added image
  • An exception has been created to allow two YouTube videos in the URL filtering profile, but the video fails to play.

Objects --> URL category:
 
Whitelist
 
Objects --> URL Filtering:
 
URL profile

User-added image


Environment


  • PAN-OS 8.1 and above.
  • Palo Alto Firewall.
  • URL filtering configured to block youtube video.



 


Cause


"youtube-streaming" application attempts to load content from other sources (that are not allowed by the security policy.) This can be seen in traffic logs.

User-added image

 


Resolution


  1. Add the highlighted FQDN (*.googlevideo.com) to the custom URL category for the allowed videos.
  2. Play the allowed videos and confirm there is no block-url on either video traffic.
User-added image
 
User-added image

 


Additional Information


The example in this article assumes the following:
  • Decryption is implemented for the URL category ( in this case "streaming-media.") 
  • No rules exist that would otherwise allow blocked URLs from the first security policy since security policies are re-evaluated during an application shift.
For more advanced YouTube allow lists, EDLs will be required. See examples using EDLs from MineMeld.
 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PPhICAW&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language