Streaming to YouTube fails, connection dropped by App Control

Description

When streaming to YouTube, the traffic is blocked by the SonicWall due to App Control Advanced. The traffic will be dropped as "IDP detection DROP_IP_IDP_RESET_CONNECTION".

Cause

This type of streaming uses the protocol RTMP (Real-Time Messagging Protocol) and the SonicWall will drop the first RTMP packet thus not allowing the streaming initialization.

The RTMP Protocol is also used for BitTorrent and Proxy Applications and we observed that streaming to YouTube is blocked due to SID (Signature ID) 63 and 5 of the App Control Advanced.

Resolution

In order to allow the RTMP Protocol to work fine, please disable SID 5 and 63 (or you can exclude a specific subnet or user group from these signatures):

  1. Go to Firewall | App Control Advanced
  2. Search for SID 5 and disable the block.
  3. Search for SID 63 and disable the block.

Image NOTE: You may have other signatures blocking this type of streaming so in some cases, a Log Review has to be done so you can find all the SID blocking this traffic.

 

Related Articles

  • SonicOS 8.1.0 FAQ
    Read More
  • SonicWall GEN8 TZs and GEN8 NSas Settings Migration
    Read More
  • Getting started with SonicWall firewalls
    Read More
not finding your answers?