URL Filtering acess to specific link

[Di_Junior]

Hi Mates

We are trying to allow a link to specific youtube video using custom application/site in Application and URL Filtering.

What is happening is that when we copy the URL from the browser and create the custom application/site, use it in the rule with an Access role, the users in the access role are only able to play the video up to the minute/second when the link was copied from the browser. After reaching the time, the video no longer plays.

Any help as to what could be the reason behind this behavior? Is there anything we are missing?

The blade is enabled, HTTPS is enabled as well. We are using R80.20

Thanks in advance

[Maik]

You specified a specific time frame within the link ("=6m21"); did you try it with the standard link that does not contain a timestamp? 🙂

[Di_Junior]

Hi there

I am copying the link directly from the address bar in the browser, so there is no timestanp on the link. Is there another way to copy the link?

Thanks in advance

[Nüüül]

Hi,

this aint a timestamp. timestamps are beginning with "?t=<seconds>"

I think, this will be because of loading the rest from CDNs or so. Do you see any logs for dropped connections from that client?

[Di_Junior]

HI there

I think the issue is with CDNs. Yes I see some drops. The connection to the CDNs is being allowed by the Firewall rules, but in the Application and URL Layer is being dropped. Any idea on how this could be overcomed.

Thanks

[Di_Junior · Accepted solution]

Hi there

after a couple of hours reading around the internet, I finally found the issue.

Apparently when creating a custom application/site, you must add also a URL with the wildcard for all the CDNs where the media is fecthed.

I used this expression "*.googlevideo.com".

After adding this URL into in the same configuration as the link of the specific youtube video that I wish to have access to, it finally started working as normal. And the remaining videos from Youtube was blocked.

DM

[steve_warren]

Did you have HTTPS inspection enabled along with the customs application?

[Di_Junior]

Hi Steve

Yes I had HTTPS Inspection enabled.

[Vladimir]

Try getting link this way:

and make sure that the "Start from" is not checked:

[Di_Junior]

Hi Vladimir

I tried this way, but still did not work.

See my post before this one.

Kind regards

[Vladimir]

@Di_Junior , this does not look like regular expression, just another URL with the wildcard.

Can you post the screencap of the *.googlevideo.com

[Maik]

Whops, sorry, I read a "t" in the first place, my bad.