SMB 1530 can't block youtube on mobile devices

[007_mjn]

Hi Team,

I have SMB 1530 firewall and version is R81.10.

I have blocked youtube but on mobile device it doesn't block youtube.

How to block youtube on mobile devices?

Https inspection is not enabled.

[Chris_Atkinson]

Which firmware version is used, how does the policy look and are you blocking things like QUIC?

[007_mjn]

The version I used is.... R81.10 (996000575)

For lan and wifi user I have added youtube application in services and application.

SRC: lan subnet --> Dst: any --> services & application: youtube --> Action:block

No I haven't blocked QUIC protocol.

[Chris_Atkinson]

Is this gateway centrally managed, which mobile devices do you have?

(Recommend upgrading to R81.10.08)

[007_mjn]

Yes, this gateway is centrally managed.

From my experience the problem didn't solve after upgrade to latest version

Mobile devices are Android phone like Samsung, xiaomi, oppo, vivo

[Chris_Atkinson]

Granted these things can be challenging sometimes without SSL inspection or DNS interventions. I first suggest testing with QUIC & Youtube-mobile also blocked.

The upgrade recommendation is general.

[007_mjn]

I block youtube-mobile and QUIC but it didn't work.

How to resolve this issue?

If I enable HTTPS inspection will it work?

[Chris_Atkinson]

What do the logs show? Would recommend continuing troubleshooting with TAC in that case.

How will you distribute the HTTPS inspection certificate to those mobile devices, are they managed devices?

[007_mjn]

The rule didn't show any logs for youtube-mobile but it shows logs for youtube application and the connection is dropped.

But still we can use youtube on mobile. On desktop and laptop youtube is blocked.

Mobile devices are not managed device. I don't know how to distribute certificate to mobile device. I know how to distribute to desktop. I will troubleshoot it with TAC.

[Kit_E]

Hi! May I know if you already resolved this issue?

We're also having the same issue on R82.

[_Val_]

Make sure you have HTTPSi enabled on your security gateway, before anything else.