I try to block Youtube but allow for Edpuzzle (Youtube safe search engine)

[0XWiwatchai]

Hi all,

I've blocked YouTube using web filtering, and it works well on Google Chrome. However, for some reason, my client's device using Safari can still access it.

By the way, I'm not sure if I can use a wildcard block because my workplace wants to force users to use Edpuzzle instead of YouTube.

Here is the filter configuration according to the Edpuzzle cookbook:

• Block www.youtube.com.
• Allow www.youtubeeducation.com and www.youtube-nocookie.com.

So what I've done is create web filtering profile follow the cookbook and apply to policy that we want to block
But unfortunately It won't work for me.

[prathma1]

We have GoGuaurdian. On top of a penalty box group, we have a group that just blocks YT. Teachers can also filter their classes over and above district filtering https://100001.onl/ .

[Cajuntank]

There are a lot of moving parts unfortunately, when it comes to this stuff nowadays.

So for example, with the client device using Safari, this could be due to the fact it's doing DNS over HTTPS (iCloud Private Relay) and this needs to be disabled or you need to deep packet inspect that traffic (requiring an installed certificate onto the device(s)) so that it can peer into that encrypted DNS traffic to know where it's going.

Some further elaboration on your setup might help with the correct "rabbit hole" to go down....(i.e.. is this managed Chrome, are you already doing deep packet inspection, do you have QUIC disabled, etc...)

[calink]

You can also refer to these two links for some guidance:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Restrict-YouTube-access-to-specific-channe... 

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/190873/filtering-based-on-yo...