Streaming to YouTube fails, connection dropped by App Control
03/26/2020 27 8540
When streaming to YouTube, the traffic is blocked by the SonicWall due to App Control Advanced. The traffic will be dropped as "IDP detection DROP_IP_IDP_RESET_CONNECTION".
This type of streaming uses the protocol RTMP (Real-Time Messagging Protocol) and the SonicWall will drop the first RTMP packet thus not allowing the streaming initialization.
The RTMP Protocol is also used for BitTorrent and Proxy Applications and we observed that streaming to YouTube is blocked due to SID (Signature ID) 63 and 5 of the App Control Advanced.
In order to allow the RTMP Protocol to work fine, please disable SID 5 and 63 (or you can exclude a specific subnet or user group from these signatures):
- Go to Firewall | App Control Advanced
- Search for SID 5 and disable the block.
- Search for SID 63 and disable the block.
NOTE: You may have other signatures blocking this type of streaming so in some cases, a Log Review has to be done so you can find all the SID blocking this traffic.