How do you block access to YouTube through HTTPS?

Available Languages

Updated:October 13, 2014
Document ID:118419

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Question

How do you block access to YouTube through HTTPS?

Environment

AsyncOS 6.x and later

Symptoms

I would like to block access to YouTube through HTTPS.

Solution

Explicit (Forward) Mode

Note: First, make sure HTTPS Proxy is successfully enabled.

  1. Navigate to Web Security Manager > Custom URL Categories.
    • Create a new Custom URL Category.
    • Name it "Block YouTube Cat" and enter the following (both): .youtube.com, youtube.com.


  2. Submit the changes.
  3. Navigate to Web Security Manager > Identities.
    • Create a new Identity.
    • Name it "Block YouTube ID" and set this identity to be in order one.
    • Define members by subnet or specific IP addresses if needed.
    • Set to "No Authentication Required".
    • At the bottom, click "Advanced", and click "URL Categories".
    • Once you see the options, select "Block YouTube Cat".
    • Click Done.
    • Submit the changes.


  4. Navigate to Web Security Manager > Decryption Policies.
    • Create a new Decryption Policy.
    • Name it "YouTube Decryption Policy".
    • Go to the "Identities and Users:" drop-down box.
    • Choose "Select One or More Identities".
    • Select the Identity named "Block YouTube ID".
    • Submit the changes.


  5. Navigate to Web Security Manager > Decryption Policies.
    • Beside the newly created YouTube Decryption Policy is a column named "URL Filtering" ("URL Categories" if before AsyncOS 7.x). Click the link under this column (it may say "global policy").
    • At the top, you will need to "Select/Add" Custom Category.
    • Select the "Block YouTube Cat" Custom URL Category and set it to "Decrypt".
    • Submit the changes.


  6. Navigate to Web Security Manager > Access Policies.
    • Create a new Access Policy.
    • Name it "YouTube Access Policy".
    • Go to the "Identities and Users:" drop-down box.
    • Choose "Select One or More Identities".
    • Select the Identity named "Block YouTube ID".
    • Submit the changes.


  7. Navigate to Web Security Manager > Access Policies.
    • Beside the newly created "YouTube Access Policy" is a column named "URL Filtering" ("URL Categories" if before AsyncOS 7.x). Click the link under this column (it may say "global policy").
    • At the top, you will need to "Select/Add" Custom Category.
    • Select the "Block YouTube Cat" Custom URL Category and set it to "Block".
    • Submit and Commit changes.

Transparent Mode (WCCP)

Note: First, make sure HTTPS Proxy is successfully enabled.

  1. Navigate to Web Security Manager > Custom URL Categories.
    • Create a new Custom URL Category.
    • Name it "Block YouTube Cat" and enter the following (both): .youtube.com, youtube.com.
    • Submit the Changes.


  2. Navigate to Web Security Manager > Identities.
    • Create a new Identity.
    • Name it "Block YouTube ID" and set this identity to be in order one.
    • Define members by subnet or IP address if needed.
    • Set to "No Authentication Required".
    • At the bottom, click on "Advanced", and click on "URL Categories".
    • IMPORTANT STEP: Once you see the categories, select the Custom URL Category "Block YouTube Cat". Also, select the Predefined Category "Search Engines and Portals".
    • Click Done.
    • Submit the Changes.


  3. Navigate to Web Security Manager > Decryption Policies.
    • Create a new Decryption Policy.
    • Name it YouTube Decryption Policy.
    • Go to the "Identities and Users:" drop-down box.
    • Choose "Select One or More Identities".
    • Select the Identity named "Block YouTube ID".
    • Submit the changes.


  4. Navigate to Web Security Manager > Decryption Policies.
    • Beside the newly created "YouTube Decryption Policy" is a column named "URL Filtering" ("URL Categories" if before AsyncOS 7.x). Click the link under this column (it may say "global policy").
    • IMPORTANT STEP: Scroll down to the Predefined Category named "Search Engines and Portals".
    • Set this to "Decrypt".
    • Submit the changes.


  5. Navigate to Web Security Manager > Access Policies.
    • Create a new Access Policy.
    • Name it "YouTube Access Policy".
    • Go to the "Identities and Users:" drop-down box.
    • Choose "Select One or More Identities".
    • Select the Identity named "Block YouTube ID".
    • Submit the changes.


  6. Navigate to Web Security Manager > Access Policies.
    • Beside the newly created "YouTube Access Policy" is a column named "URL Filtering" ("URL Categories" if before AsyncOS 7.x). Click the link under this column (it may say "global policy").
    • At the top, you will need to "Select/Add" Custom Category.
    • Select the "Block YouTube Cat" Custom URL Category and set it to "Block".
    • Submit and Commit changes.

Revision History

Revision Publish Date Comments
1.0
13-Oct-2014
Initial Release
TAC Authored

Contributed by Cisco Engineers

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products