Question:
How can I configure the WSA to only allow users to view a specific YouTube channel but block all other streaming media.
Environment: All Cisco Web Security appliances running AsyncOS 7.1.x & above
Solution:
YouTube videos from the channel page typically include a unique identifier in their hyperlinks for all videos from that channel.
This article assumes that the "Streaming Media" category is set to Block in the Access Policies.
In order to allow videos from the specific channel, you will need to set up the following:.
Configuration steps to allow videos from the specific YouTube channel |
1. Go to Web Security Manager > Custom URL Categories and create a new category labeled 'YouTube'
2. Add the following entries to the Sites field: ytimg.com, .ytimg.com
3. Add the following entries to the Regular Expressions: www\.youtube\.com/.*<ChannelName> youtube\.com/videoplayback www\.youtube\.com/crossdomain\.xml youtube\.com/generate
4. Go to Web Security Manager > Access Policies and create a new policy.
5. Choose an Identity to apply to the new policy or select the 'YouTube' custom URL category as a membership criteria.
6. Edit the URL Categories for the new policy and set the action for the 'YouTube' custom URL category to either Monitor or Allow.
7. Submit and commit the changes. |
Note: This configuration only applies to videos sourced from the channel page and not from the search results or feeds links.