How do I block an individual YouTube video using Content Filtering Service (CFS)?

03/26/2020 105 10902

DESCRIPTION:

This knowledge base article illustrates the process to block an individual youtube video using Keyword List in Content Filtering Service (CFS).

CAUSE:

Starting in SonicOS 6.5.1.1, SonicWall Content Filtering Service (CFS) can filter and block individual YouTube videos. Previously, CFS could only allow or block all YouTube videos.

NOTE: DPI SSL must be licensed and enabled. For more information on DPI-SSL implementation, please visit: CFS with DPI-SSL

RESOLUTION:

NOTE: Assumption: DPI-SSL is licensed and DPI-SSL certificate is installed in client's browsers.

Click on MANAGE | Security Services | Content Filter

• Under Global Settings, the option: Enable HTTPS Content Filtering must be disabled when content filter is being enforced along with DPI-SSL

• Click ACCEPT

Click on MANAGE | Decryption Services | DPI-SSL/TLS Client

• Under General Tab, Enable Enable SSL Client Inspection & Content Filter

• Click on ACCEPT

Click on MANAGE | Objects | Content Filter Objects

• Click on URI List Objects | Add 
  • Give a friendly name for CFS URI List Object | Click on Keyword List | ADD 
  • Enter the Keyword as v=OadSHk8noww | Click SAVE

TIP: Use "v=" parameter and its value off of the youtube URI. For instance, the actual URI looks like this: https://www.youtube.com/watch?v=OadSHk8noww, use only v=OadSHk8noww as a Keyword.

• Click OK 

Click on MANAGE | Objects | Content Filter Objects

• Click on CFS Profile Objects | Add
  • Give a friendly name to CFS Profile Object
  • Select "Block YouTube Video" URI List Object that we created previously under Forbidden URI List
  • Set "URI List Searching Order" to Forbidden URI List First
  • Click OK

Click on MANAGE | Rules | Content Filter Policies

• Click Add
  • Give a friendly name to CFS Policy
  • Select Source Zone: LAN and Destination Zone: WAN
  • Select Profile: Block YouTube Video Profile
  • Set Action to CFS Default Action
  • Click OK

• Click on Priority up/down arrow icon  of the "Block YouTube Video Policy" and raise the priority to 1 and click SAVE.

How to Test:

• Open a web browser in the PC behind X0 LAN Zone of the SonicWall and go to https://www.youtube.com/watch?v=OadSHk8noww, the video will be blocked by the CFS + DPI-SSL.

Click on INVESTIGATE | Logs | Event Logs to see the logs for web site access denied.