Need assistance with MWSA filtering

[jjimenez829]

Hi All,

I've hit a bit of a roadblock with an issue I ran into with our web filtering. 

We have YouTube blocked at the domain level on our blacklist but have allowed a couple of URLS (regex) for YouTube in our Whitelist but the end user is still getting blocked by the blacklist entry. 

I've tested allowing the URLs on a whitelist above & below the blacklist but get the same disposition. What am I missing? 

I've poked around the associated (per policy trace using the end user's IP) access policy, ID profile and decryption policy but can't seem to find the cause. 

Thank you all in advance

[Sapan Goel]

When you load particular video in youtube, the page also refers to some other URL's in youtube. Now since you have blocked it at domain level, so these other URL's would be getting blocked. I suggest to use a referer feature to and allow any referer traffic that is referred by your allowed video URLs.

Referer feature is part of 10.1.x+ releases.

Thanks

Sapan

[jjimenez829]

Thank you for the response Sapan. Can you point me in the direction of any documentation detailing the process?

[Sapan Goel]

You can refer to following youtube videos - https://www.youtube.com/watch?v=GkQnBa3C7WI

https://www.youtube.com/watch?v=Rz_kYKyyAlk

For more details you can refer to section "Exceptions to Blocking for Embedded and Referred Content" in chapter 9 of WSA user guide - https://www.cisco.com/c/dam/en/us/td/docs/security/wsa/wsa_10-0/WSA_10-1-2_UserGuide.pdf

Thanks

Sapan