topic Re: Need assistance with MWSA filtering in Web Security

Need assistance with MWSA filtering

jjimenez829 — Sat, 09 Mar 2019 03:43:23 GMT

Hi All,

I've hit a bit of a roadblock with an issue I ran into with our web filtering.

We have YouTube blocked at the domain level on our blacklist but have allowed a couple of URLS (regex) for YouTube in our Whitelist but the end user is still getting blocked by the blacklist entry.

I've tested allowing the URLs on a whitelist above & below the blacklist but get the same disposition. What am I missing?

I've poked around the associated (per policy trace using the end user's IP) access policy, ID profile and decryption policy but can't seem to find the cause.

Thank you all in advance

Re: Need assistance with MWSA filtering

Sapan Goel — Tue, 13 Feb 2018 11:52:45 GMT

When you load particular video in youtube, the page also refers to some other URL's in youtube. Now since you have blocked it at domain level, so these other URL's would be getting blocked. I suggest to use a referer feature to and allow any referer traffic that is referred by your allowed video URLs.

Referer feature is part of 10.1.x+ releases.

Thanks

Sapan

Re: Need assistance with MWSA filtering

jjimenez829 — Tue, 13 Feb 2018 20:29:18 GMT

Thank you for the response Sapan. Can you point me in the direction of any documentation detailing the process?

Re: Need assistance with MWSA filtering

Sapan Goel — Wed, 14 Feb 2018 03:45:08 GMT

You can refer to following youtube videos - https://www.youtube.com/watch?v=GkQnBa3C7WI

https://www.youtube.com/watch?v=Rz_kYKyyAlk

For more details you can refer to section "Exceptions to Blocking for Embedded and Referred Content" in chapter 9 of WSA user guide - https://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa_10-0/WSA_10-1-2_UserGuide.pdf

Thanks

Sapan