Late tag preventing proper policy evaluation for Youtube in policy trace

book

Article ID: 171045

calendar_today

Updated On:

Products

Advanced Secure Gateway Software - ASG ProxySG Software - SGOS

Issue/Introduction

Situation: When doing a policy trace for a YouTube channel some policies are not working or not applying.

Further findings show the policy trace for the channel showing late tag:

Example:

late:     condition=List1Regex_allow

Resolution

;***********START Allow Youtube Channels ************

<proxy>

url.domain=www.youtube.com http.method=CONNECT ALLOW
url.regex="ssl://"  url.domain=//www.youtube.com/ ALLOW

<Proxy>

 ALLOW condition=List1Regex_allow
 

define condition List1Regex_allow

;Youtube main Channel  ; https://www.youtube.com/channel/UCK-GN21LMCsDoQgnZXNqLaw

url.regex="UCK-GN21LMCsDoQgnZXNqLaw"

request.header.Referer="UCK-GN21LMCsDoQgnZXNqLaw"

 

;Youtube Sub-Channel, the sub-channels inside the main channel.

url.regex="G_Cfd-4_Oqc"   ;Main channel video list

request.header.Referer="G_Cfd-4_Oqc"  ;Main channel video list

 

url.regex="BWXOZFtePQ9dOrs-igYRu9L1Xizi"   ;Vevo - Country sub-channel

request.header.Referer="BWXOZFtePQ9dOrs-igYRu9L1Xizi"   ;Vevo - Country sub-channel

url.domain=ytimg.com

url.domain=googlevideo.com

url.substring=crossdomain.xml

end

;***********END Allow Youtube Channels ************

 

Note: Youtube may add new domain if this is the case simply add the new domain as url.domain=example.com