Problem with the youtube filtering capability of web safety.

[Shepherd Follower]

I attached a shot of what I am referring to.  How do you get the youtube filtering features to work in web safety?  It seems like even if you block a specific channel with its id it will still not block access to that.  You can see the many catagories that are blocked but that does not seem to affect what you can access on youtub.  I would be happy for any input out there.

[Rafael Akchurin]

Https decryption is enabled? 

You are using browser to access yt?

Best regards,

Rafael

Op 29 sep. 2022 om 21:50 heeft Shepherd Follower <shepherdf...@gmail.com> het volgende geschreven:

I attached a shot of what I am referring to.  How do you get the youtube filtering features to work in web safety?  It seems like even if you block a specific channel with its id it will still not block access to that.  You can see the many catagories that are blocked but that does not seem to affect what you can access on youtub.  I would be happy for any input out there.

--
You received this message because you are subscribed to the Google Groups "Diladele Web Safety" group.
To unsubscribe from this group and stop receiving emails from it, send an email to web-safety+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/web-safety/7c85e938-46d4-455c-ab08-c6aaf09620dcn%40googlegroups.com.

[Shepherd Follower]

Yes that is right .  Using browser to go to YT.

You received this message because you are subscribed to a topic in the Google Groups "Diladele Web Safety" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/web-safety/DLPfoY44SCs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to web-safety+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/web-safety/A7B7FCB3-70AC-4FFA-B776-88438CC50CE2%40diladele.com.

[Rafael Akchurin]

I am afraid you might be hitting https://github.com/diladele/websafety/issues/1779 - unless you deployed proxy transparently and did not block QUICK for example.

To view this discussion on the web visit https://groups.google.com/d/msgid/web-safety/CAKGKkJGGtqdP1%2B-XefVxTfMaTXKWzHue0gz%2BMuU%3D3X9HHdNj6A%40mail.gmail.com.

[Rodney Baker]

If the browser is using QUIC (not QUICK) it renders content filtering ineffective by encrypting the whole payload (including headers). I've found it necessary to block outbound traffic on UDP port 443 at the router/firewall, which forces the browser to fall back to https (TCP/443) and then https decryption works correctly (provided the Web Safety cert is correctly installed in the browser). This also applies to facebook and other some other social media platforms, too.

[Rafael Akchurin]

So may I ask if you are using the proxy as transparent/intercept or browser is explicitly talking to proxy for access to YTR?

 

From: web-s...@googlegroups.com <web-s...@googlegroups.com> On Behalf Of Rodney Baker
Sent: Tuesday, October 4, 2022 2:21 PM
To: Diladele Web Safety <web-s...@googlegroups.com>
Subject: Re: Problem with the youtube filtering capability of web safety.

 

If the browser is using QUIC (not QUICK) it renders content filtering ineffective by encrypting the whole payload (including headers). I've found it necessary to block outbound traffic on UDP port 443 at the router/firewall, which forces the browser to fall back to https (TCP/443) and then https decryption works correctly (provided the Web Safety cert is correctly installed in the browser). This also applies to facebook and other some other social media platforms, too.

On Tuesday, 4 October 2022 at 17:26:23 UTC+10:30 rafael....@diladele.com wrote:

I am afraid you might be hitting https://github.com/diladele/websafety/issues/1779 - unless you deployed proxy transparently and did not block QUICK for example.

 

From: web-s...@googlegroups.com <web-s...@googlegroups.com> On Behalf Of Shepherd Follower
Sent: Tuesday, October 4, 2022 3:29 AM
To: web-s...@googlegroups.com
Subject: Re: Problem with the youtube filtering capability of web safety.

 

Yes that is right .  Using browser to go to YT.

 

 

On Thu, Sep 29, 2022 at 4:01 PM Rafael Akchurin <rafael....@diladele.com> wrote:

Https decryption is enabled? 

You are using browser to access yt?

Best regards,

Rafael

 

Op 29 sep. 2022 om 21:50 heeft Shepherd Follower <shepherdf...@gmail.com> het volgende geschreven:

I attached a shot of what I am referring to.  How do you get the youtube filtering features to work in web safety?  It seems like even if you block a specific channel with its id it will still not block access to that.  You can see the many catagories that are blocked but that does not seem to affect what you can access on youtub.  I would be happy for any input out there.

--
You received this message because you are subscribed to the Google Groups "Diladele Web Safety" group.
To unsubscribe from this group and stop receiving emails from it, send an email to web-safety+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/web-safety/7c85e938-46d4-455c-ab08-c6aaf09620dcn%40googlegroups.com.

--
You received this message because you are subscribed to a topic in the Google Groups "Diladele Web Safety" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/web-safety/DLPfoY44SCs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to web-safety+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/web-safety/A7B7FCB3-70AC-4FFA-B776-88438CC50CE2%40diladele.com.

--
You received this message because you are subscribed to the Google Groups "Diladele Web Safety" group.
To unsubscribe from this group and stop receiving emails from it, send an email to web-safety+...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/web-safety/CAKGKkJGGtqdP1%2B-XefVxTfMaTXKWzHue0gz%2BMuU%3D3X9HHdNj6A%40mail.gmail.com.

--

You received this message because you are subscribed to the Google Groups "Diladele Web Safety" group.
To unsubscribe from this group and stop receiving emails from it, send an email to web-safety+...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/web-safety/44ae6a61-aeaf-43fe-8f7b-2b52934341fen%40googlegroups.com.

[Shepherd Follower]

I am a new tech support agent with the company I am working for so I am still learning.  I believe we are using a transparent proxy in between client and the internet.

[Shepherd Follower]

So this video is getting catagorized correctly and it is a blocked catagory but are there any simple settings to be changed on the websafety control panel to make it so a blocked catagory will be effective in blocking videos in that catagory?  Or do I need to do that blocking of outbound traffic on UDP port 443 at the router/firewall?  Just trying to make this filtering more effective for our users.

Shepherd Follower