This article applies to:
- Web Filter (R3000), including WFR
Question:
- How can I allow or block YouTube access for specific users?
Comments:
IP addresses should not be added to custom URL categories with YouTube sites. This is because YouTube shares the same certificate across multiple services. IP addresses listed in a custom URL category for Google or YouTube sites must be removed or inconsistent filtering results will occur.
Procedure:
Follow these steps to address issues with YouTube access:
Add a Custom Category for access
- From the main Web Filter window select Library > Category Groups > Custom Categories.
- Select the group that you have created for YouTube.
- Choose URLs.
- In the Edit Wildcard URL List pane, type *.googlevideo.com and then click Add.
- Ensure *googlevideo.com is highlighted, click Apply, and then click Reload Library.
You may also want to checking whether the following domains are also listed in the custom category:
- *.googlevideo.com
- *.ytimg.com
- *.youtube-nocookie.com
- *.youtube.com
Note: Reloading the library could take up to 10 minutes.
Allow Profile access
If you are still unable to view YouTube videos, check the following:
- In the main Web Filter window, navigate to Policy > IP or Policy > LDAP (depending on the type of policy in use).
- Select a group that you want to allow to play YouTube Videos.
- Navigate to Group Profile > Custom Categories (or Profile > Custom Categories when LDAP is in use).
- Select the group that you have created for YouTube, set it to ALLOW, and then click Apply.
Repeat the above steps for each group that is allowed to play YouTube videos.
Check Custom Categories
If users are still unable to view YouTube after the above steps are completed, it is highly likely that IP addresses are listed in a custom category.
- Perform a library lookup on googlevideo.com, ytimg.com, youtube-nocookie.com, youtube.com and google.com.
- Remove any IP addresses that have been added to a custom category and then retest.
If you are still having issues or see an excessive number of individual IPs listed, contact Trustwave for additional assistance. See contact details at the end of this article.
