Cannot block the entire website domain on ASA Sourcefire

[Enid Vallja]

Hi guys!

I need some help with the Access Control policies.

I'm trying to block YouTube for some object groups but when I block https://www.youtube.com I see other links of YouTube that are allowed, like:

https://img.youtube.com

https://s.youtube.com

https://consent.youtube.com

https://fcmatch.youtube.com

https://youtubei.youtube.com etc.

I tried to block "*youtube.com" which I thought will cover all these pages but it still don't work.

Any idea how to do it?

[neipatel]

enidbeats,

Have you tried using the "Youtube" application filter rather than a URL object (which I assume you are using now, is that correct?).

Also, as this is posted in the API section are you attempting to leverage the API to make the rule? You might reach a larger / more targeted audience posting the question to the broader Firepower forum.

-Neil

[Enid Vallja]

Hi Neil, 

Yeah I tried using the "Youtube" application filter both with URL but it doesn't work.

URL-s are working one by one but the application not.

Yeah, you're right, just that this is the first time i post here and was thinking the Firepower API is the right section... Thanks a lot!