Allow a single YouTube video through the Web Security Service (WSS)

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

In WSS policy, I want to allow a single YouTube video URL and block all other YouTube content.

 

Cause

The YouTube URL algorithm contains a unique video ID (for example: tTwddwEceIg) to retrieve videos.

This allows Content Filtering policy to identify and configure that particular video.

NOTE: SSL Interception must be enabled to intercept the traffic.

 

Resolution

IMPORTANT: These rules must be added to the "Group B" policy section (below "Group A").

(1) In the WSS Portal, add a Content Filtering policy rule similar to this...where the following Destination values are allowed: 

googlevideo.com
https://www.youtube.com/s/desktop
https://www.youtube.com/s/player

...and also the full YouTube URL with the unique video ID: 

https://www.youtube.com/watch?v=tTwddwEceIg (example)

 

(2) Create a second rule...below the first rule above...that blocks this Domain: 

youtube.com

 

EXAMPLE: 

 

Additional Information

When a user tries to access other YouTube videos (other than the video allowed) or if they try to access the YouTube.com homepage, the user will get a YouTube error similar to this: 

 

(ProxySG) As a reference, the following article provides similar steps for a ProxySG (but note that there are differences between ProxySG and WSS policies): 

Allowing a single YouTube video through a ProxySG
https://knowledge.broadcom.com/external/article?articleId=165347