topic Re: URL Filtering acess to specific link in Firewall and Security Management

URL Filtering acess to specific link

Di_Junior — Mon, 17 Jun 2019 14:51:23 GMT

Hi Mates

We are trying to allow a link to specific youtube video using custom application/site in Application and URL Filtering.

What is happening is that when we copy the URL from the browser and create the custom application/site, use it in the rule with an Access role, the users in the access role are only able to play the video up to the minute/second when the link was copied from the browser. After reaching the time, the video no longer plays.

Any help as to what could be the reason behind this behavior? Is there anything we are missing?

The blade is enabled, HTTPS is enabled as well. We are using R80.20

Thanks in advance

Re: URL Filtering acess to specific link

Maik — Mon, 17 Jun 2019 15:09:24 GMT

You specified a specific time frame within the link ("=6m21"); did you try it with the standard link that does not contain a timestamp? 🙂

Re: URL Filtering acess to specific link

Di_Junior — Mon, 17 Jun 2019 15:21:44 GMT

Hi there

I am copying the link directly from the address bar in the browser, so there is no timestanp on the link. Is there another way to copy the link?

Thanks in advance

Re: URL Filtering acess to specific link

Nüüül — Mon, 17 Jun 2019 17:03:37 GMT

Hi,

this aint a timestamp. timestamps are beginning with "?t=<seconds>"

I think, this will be because of loading the rest from CDNs or so. Do you see any logs for dropped connections from that client?

Re: URL Filtering acess to specific link

Di_Junior — Mon, 17 Jun 2019 17:17:32 GMT

HI there

I think the issue is with CDNs. Yes I see some drops. The connection to the CDNs is being allowed by the Firewall rules, but in the Application and URL Layer is being dropped. Any idea on how this could be overcomed.

Thanks

Re: URL Filtering acess to specific link

Di_Junior — Mon, 17 Jun 2019 18:14:08 GMT

Hi there

after a couple of hours reading around the internet, I finally found the issue.

Apparently when creating a custom application/site, you must add also a URL with the wildcard for all the CDNs where the media is fecthed.

I used this expression "*.googlevideo.com".

After adding this URL into in the same configuration as the link of the specific youtube video that I wish to have access to, it finally started working as normal. And the remaining videos from Youtube was blocked.

Re: URL Filtering acess to specific link

Vladimir — Mon, 17 Jun 2019 18:03:12 GMT

Try getting link this way:

and make sure that the "Start from" is not checked:

Re: URL Filtering acess to specific link

Di_Junior — Mon, 17 Jun 2019 18:04:56 GMT

Hi Vladimir

I tried this way, but still did not work.

See my post before this one.

Kind regards

Re: URL Filtering acess to specific link

Maik — Mon, 17 Jun 2019 18:06:22 GMT

Whops, sorry, I read a "t" in the first place, my bad.

Re: URL Filtering acess to specific link

Vladimir — Mon, 17 Jun 2019 18:10:36 GMT

@Di_Junior , this does not look like regular expression, just another URL with the wildcard.

Can you post the screencap of the *.googlevideo.com

Re: URL Filtering acess to specific link

steve_warren — Sun, 05 Apr 2020 08:00:35 GMT

Did you have HTTPS inspection enabled along with the customs application?

Re: URL Filtering acess to specific link

Di_Junior — Mon, 06 Apr 2020 07:18:43 GMT

Hi Steve

Yes I had HTTPS Inspection enabled.