Block Youtube access except of one channel

[choyrack]

Hello

Is it possible to block access to YouTube except of one channel?

Regards

Mariusz

[hmtay_FTNT · Accepted solution]

Hello Mariusz,

Yes, it is possible. Can you add the following custom signatures?

F-SBID( --name "Youtube.Channel.Specific_Custom"; --protocol tcp; --flow from_client; --app_cat 12; --service HTTP; --pattern ".youtube.com"; --context host; --no_case; --pattern "channel/UC8pN3ndaZMNOezIy48sRpHA"; --context uri; --no_case; --no_case; --within 40; --weight 50; ) F-SBID( --name "Youtube.Tag_Custom"; --protocol tcp; --flow from_client; --app_cat 6; --service HTTP; --pattern ".youtube.com"; --context host; --no_case; --pattern "/watch?"; --context uri; --no_case; --no_case; --within 40; --weight 50; --tag set,Youtube.Tag; ) F-SBID( --name "Youtube.Channel.Video_Custom"; --protocol tcp; --flow from_server; --app_cat 6; --service HTTP; --pattern "channelId|22| content=|22|UC8pN3ndaZMNOezIy48sRpHA"; --context body; --no_case; --weight 150; --tag test,Youtube.Tag; --tag clear,Youtube.Tag; ) F-SBID( --name "Youtube.Channel.Block_Custom"; --protocol tcp; --flow from_server; --app_cat 6; --service HTTP; --pattern "ucid|22|:|22|"; --context body; --no_case; --pattern !"UC8pN3ndaZMNOezIy48sRpHA"; --context body; --no_case; --distance 0; --within 30; --weight 50; --tag test,Youtube.Tag; )

Change the texts in bold into the specific channel you are interested in allowing. Set the first 3 signatures to Monitor and the last one to Block. You will need to enable deep-inspection for the signatures to work. Let me know how it goes. Thank you.

Homing

[choyrack]

Hello

It is work! Thank you.

[Ramesh_M]

This is good. Its works for me . 

Thanks

[hernaneac]

Not work for me :( .What's FortiOS Version?

[slemke]

Hello,

does also not work for me on 5.6 :(

How to debug this? "diag debug application urlfilter -1" seems not to be correct for the Application Control?

Thanks,

Sebastian

[dmilagros_FTNT]

It works for me. I used FGT100D v5.6.3 build1547 (GA). Thanks

[juslj]

hernaneac wrote:

Not work for me :( .What's FortiOS Version?

Here it worked after disabling the QUIC option and following the hmtay_FTNT orientation.

[VenomSdM]

juslj wrote:

hernaneac wrote:

Not work for me :( .What's FortiOS Version?

Here it worked after disabling the QUIC option and following the hmtay_FTNT orientation.

Greetings,

can you please explain which is "hmtay_FTNT orientation"?

I tried to get this work, but it does not block the channel

Thanks in advance

[juslj]

VenomSdM wrote:

juslj wrote:

hernaneac wrote:

Not work for me :( .What's FortiOS Version?

Here it worked after disabling the QUIC option and following the hmtay_FTNT orientation.

Greetings,

can you please explain which is "hmtay_FTNT orientation"?

I tried to get this work, but it does not block the channel

Thanks in advance

In Security Profiles ... Application Control .. You have the QUIC option. I disabled this option and followed hmtay_FTNT's guidance.

hmtay wrote:

Hello Mariusz,

Yes, it is possible. Can you add the following custom signatures?

F-SBID( --name "Youtube.Channel.Specific_Custom"; --protocol tcp; --flow from_client; --app_cat 12; --service HTTP; --pattern ".youtube.com"; --context host; --no_case; --pattern "channel/UC8pN3ndaZMNOezIy48sRpHA"; --context uri; --no_case; --no_case; --within 40; --weight 50; ) F-SBID( --name "Youtube.Tag_Custom"; --protocol tcp; --flow from_client; --app_cat 6; --service HTTP; --pattern ".youtube.com"; --context host; --no_case; --pattern "/watch?"; --context uri; --no_case; --no_case; --within 40; --weight 50; --tag set,Youtube.Tag; ) F-SBID( --name "Youtube.Channel.Video_Custom"; --protocol tcp; --flow from_server; --app_cat 6; --service HTTP; --pattern "channelId|22| content=|22|UC8pN3ndaZMNOezIy48sRpHA"; --context body; --no_case; --weight 150; --tag test,Youtube.Tag; --tag clear,Youtube.Tag; ) F-SBID( --name "Youtube.Channel.Block_Custom"; --protocol tcp; --flow from_server; --app_cat 6; --service HTTP; --pattern "ucid|22|:|22|"; --context body; --no_case; --pattern !"UC8pN3ndaZMNOezIy48sRpHA"; --context body; --no_case; --distance 0; --within 30; --weight 50; --tag test,Youtube.Tag; )

Change the texts in bold into the specific channel you are interested in allowing. Set the first 3 signatures to Monitor and the last one to Block. You will need to enable deep-inspection for the signatures to work. Let me know how it goes. Thank you.

Homing