WebBlocker Override for youtube access

I have tried to using WebBlocker for denying access youtube and facebook with override, but I have a problem, but when I test for youtube access, I can override but not appears image and I can't play the video. So I try for access facebook and result is override work to good.I wait for a few minutes I think that cause the page might not load correctly or completely, but I still cannot play the video. And then I got this log.

2019-08-08 10:22:19 Deny https/tcp 10566 443 1-Trusted 0-External ProxyDeny: HTTP Request categories (Outgoing_HTTPS-proxy_IT-00) HTTP-Client.Standard.APT.2 proc_id="http-proxy" rc="595" msg_id="1AFF-0021" proxy_act="HTTP-Client.Standard.APT.2" cats="Social Web - YouTube" op="GET" dstname="i.ytimg.com" arg="/vi/3PBUxxVCtFI/hqdefault.jpg?sqp=-oaymwEYCNIBEHZIVfKriqkDCwgBFQAAiEIYAXAB&rs=AOn4CLAHlvNr1IN0bUDOt0uGs3d0pX3KOA" geo_dst="USA" Traffic

Please kindly advice.

Ajep Al Murnando


  • Whenever you post, please include your XTM version.

    YouTube content comes from many domains. i.ytimg.com is one of them.
    I'm not sure how WB should work for access to a site such as YouTube with multiple domain accesses when using the over-ride.
    Consider opening a support incident on this.

  • Hi bruce,

    Ok noted, for next post, I'll include the XTM Version.FYI currently I using Firebox M470 with fireware 12.5 and WSM 12.5.

    I think category "media streaming : Youtube" on WebBlocker already included all domains from youtube.

    Ajep Al Murnando

  • Ok, thanks bruce. I just wondering, maybe someone here ever get same case with me. So I try ask here for discuss.

    Ajep Al Murnando

  • Did you find a solution for this?
    I am having the same issue with M370 12.5

  • james.carsonjames.carson Moderator, WatchGuard Representative

    Hi @ajep_almurnand0 @LudwigKa
    You'll likely need to do an webblocker override for * (all sites) as the number of individual exceptions that you'd need to make in order to allow a video is rather high. They can also change depending on your region, video settings, etc.

    -James Carson
    WatchGuard Customer Support

  • does anyone know how to completly block youtube access from a specific ip on my network?

  • Add a HTTPS proxy From: the to be blocked IP addr To: Any-external
    On the Proxy action, add a Domain Names entry for a Pattern Match for *.youtube.com, set to Deny & Log

    Make sure that this policy ends up above any policy which allows HTTPS packets from the blocked IP addr

Sign In to comment.