Allowed YouTube Video Does Not Stream
14697
Created On 04/18/20 02:18 AM - Last Modified 07/02/20 18:29 PM
Symptom
- All "streaming-media" is blocked by the URL filtering profile in security policy.
- "streaming-media" application is being decrypted.
Policies--> Decryption:
- An exception has been created to allow two YouTube videos in the URL filtering profile, but the video fails to play.
Objects --> URL category:
Objects --> URL Filtering:
Environment
- PAN-OS 8.1 and above.
- Palo Alto Firewall.
- URL filtering configured to block youtube video.
Cause
"youtube-streaming" application attempts to load content from other sources (that are not allowed by the security policy.) This can be seen in traffic logs.
Resolution
- Add the highlighted FQDN (*.googlevideo.com) to the custom URL category for the allowed videos.
- Play the allowed videos and confirm there is no block-url on either video traffic.
Additional Information
The example in this article assumes the following:
- Decryption is implemented for the URL category ( in this case "streaming-media.")
- No rules exist that would otherwise allow blocked URLs from the first security policy since security policies are re-evaluated during an application shift.