topic SMB 1530 can't block youtube on mobile devices in Spark Firewall (SMB)

SMB 1530 can't block youtube on mobile devices

007_mjn — Tue, 12 Dec 2023 09:03:44 GMT

Hi Team,

I have SMB 1530 firewall and version is R81.10.

I have blocked youtube but on mobile device it doesn't block youtube.

How to block youtube on mobile devices?

Https inspection is not enabled.

Re: SMB 1530 can't block youtube on mobile devices

Chris_Atkinson — Tue, 12 Dec 2023 11:10:52 GMT

Which firmware version is used, how does the policy look and are you blocking things like QUIC?

Re: SMB 1530 can't block youtube on mobile devices

007_mjn — Tue, 12 Dec 2023 11:59:10 GMT

The version I used is.... R81.10 (996000575)

For lan and wifi user I have added youtube application in services and application.

SRC: lan subnet --> Dst: any --> services & application: youtube --> Action:block

No I haven't blocked QUIC protocol.

Re: SMB 1530 can't block youtube on mobile devices

Chris_Atkinson — Tue, 12 Dec 2023 14:22:17 GMT

Is this gateway centrally managed, which mobile devices do you have?

(Recommend upgrading to R81.10.08)

Re: SMB 1530 can't block youtube on mobile devices

007_mjn — Tue, 12 Dec 2023 14:35:28 GMT

Yes, this gateway is centrally managed.

From my experience the problem didn't solve after upgrade to latest version

Mobile devices are Android phone like Samsung, xiaomi, oppo, vivo

Re: SMB 1530 can't block youtube on mobile devices

Chris_Atkinson — Tue, 12 Dec 2023 14:51:58 GMT

Granted these things can be challenging sometimes without SSL inspection or DNS interventions. I first suggest testing with QUIC & Youtube-mobile also blocked.

The upgrade recommendation is general.

Re: SMB 1530 can't block youtube on mobile devices

007_mjn — Thu, 14 Dec 2023 05:53:55 GMT

I block youtube-mobile and QUIC but it didn't work.

How to resolve this issue?

If I enable HTTPS inspection will it work?

Re: SMB 1530 can't block youtube on mobile devices

Chris_Atkinson — Thu, 14 Dec 2023 06:38:21 GMT

What do the logs show? Would recommend continuing troubleshooting with TAC in that case.

How will you distribute the HTTPS inspection certificate to those mobile devices, are they managed devices?

Re: SMB 1530 can't block youtube on mobile devices

007_mjn — Thu, 14 Dec 2023 08:38:25 GMT

The rule didn't show any logs for youtube-mobile but it shows logs for youtube application and the connection is dropped.

But still we can use youtube on mobile. On desktop and laptop youtube is blocked.

Mobile devices are not managed device. I don't know how to distribute certificate to mobile device. I know how to distribute to desktop. I will troubleshoot it with TAC.

Re: SMB 1530 can't block youtube on mobile devices

Kit_E — Thu, 20 Mar 2025 05:45:26 GMT

Hi! May I know if you already resolved this issue?

We're also having the same issue on R82.

Re: SMB 1530 can't block youtube on mobile devices

_Val_ — Thu, 20 Mar 2025 07:38:43 GMT

Make sure you have HTTPSi enabled on your security gateway, before anything else.