Technical Tip: How to Block Youtube using Static URL filter

Blocking YouTube on a static URL filter is typically required when the Streaming Media and Download category is allowed but there is a need to block YouTube.

Part 1: How to block YouTube.

Configuration :

URL: '.*googlevideo.*'
Type: Regex
Action: Block

URL: '.*youtube.*'
Type: Regex
Action: Block

URL: '.*ytimg.*'
Type: Regex
Action: Block

Both URLs are required to be added to avoid bypassing the blockade due to browser cache or searching the YouTube video through a search engine.

The YouTube website may still load, but users affected by this Webfilter profile will not be able to load videos.

Create a Deny-based firewall rule with the UDP 443 port.

Blocking QUIC this way will force the web browser to use TLS instead. 

 Follow the steps mentioned below to block the website:

 

Once the Web Filter profile is configured:

• Go to Policy & Objects -> IPv4 Policy.

• Apply the Web Filter profile to the firewall policy that handles traffic from users.

 

Part 2: How to allow YouTube embedded URLs while blocking YouTube:

 

The profiles below are created assuming only YouTube needs to be blocked while allowing YouTube embedded URLs and the rest of the internet.

 

Step 1: Create the following Webfilter profile:

FortiGuard categories are disabled, and the URL filter is enabled. While allowing the rest of the internet with *.

 

 

Step 2: Create the following application control profile: 

 

 

Step 3: Create a firewall policy with deep inspection and add the above webfilter and application control profile.

 

Related article: 

Technical Note: Disabling / Blocking QUIC Protocol to force Google Chrome to use TLS