URL Categories in WSA inside Youtube

I have a question regarding the Ironport WSA. Is there is a way to distinguish a category inside the category of video streaming?
For example, can I filter a youtube video showing porn, or adult-only material and permit other type of videos?
Thanks for your help!

Hi Vijayan, if the web page you're trying to whitelist includes object from other web sites you should add these web sites to custom URL filter also when some of the included web sites are blocked by predefined filters.
The page wptfb.com loads content from all these web sites also:
http://frog.wix.com/
http://premium.wix.com/
http://static.wixstatic.com/
http://frog.wix.com/plebs
http://www.wix.com/
http://static.wixstatic.com/media
http://storage.googleapis.com
http://assets.wix.com/
http://editor.wix.com/html
https://users.wix.com
http://static.parastorage.com/
So if any of the categories for these web sites is blocked with predefined URL categories you have to add the address of the web site to URL filter also.
Or you can Allow whole predefined category as you did.
Use Reporting > Web Tracking for fine tuning.

Similar Messages

Sourcefire application and URL categories lists

Hello,
Does anyone know the links to see the list of applications/microapps and categories which are supported by firepower?
Many thanks,
J

There are no sub-categories - just the 80+ top-level categories. I've included a screenshot below (open in new tab to zoom) of how it looks in a URL Filter rule editing session.
I'm not positive if Cisco has integrated / normalized the FirePOWER-categorized URLs with those which you can check on www.senderbase.org. That site will tell you the category (used by the WSA product) if you supply the URL or TLD.

URL Mapping not working inside MOSS

hi,
I want to achieve broken URL redirection in old web application developed in MOSS.
For this purpose, i have to use URL mapping inside web.config -
For Example -
<urlMappings enabled="true" >
<add url="~/brokenpath" mappedUrl="/subsite/Pages/Home.aspx" />
</urlMappings>
I have checked that '/subsite/Pages/Home.aspx' url is not broken but still getting 404 exception.
Similar tag is working under dev/local environment but not working in the production,
Can anybody please let me know the problem or any configuration missing.
Thanks in advance.

Hi Saurabh, can you provide the actual broken path, both in your web.config as well as the absolute URL?
Dimitri Ayrapetov (MCSE: SharePoint)

Youtube URL (but not links to Youtube from pages elsewhere) crashes all three of my browsers., Youtube URL (but not links to Youtube from pages elsewhere) crashes all three of my browsers.

All three of my browsers crash when I enter the Youtube URL <http://www.youtube.com> in the address window. Safari reports that the problem may be caused by my Adobe Flash Player, so I reinstalled that, rebooted. Didn't help. Google Help then suggested I empty the cache and remove all cookies. I did that (with Firefox). Also didn't help. Then I Repaired Permissions. That didn't help either.
But if I use Yahoo video search, or any other site's link to get to a Youtube video, there's no problem; the video not only plays, but once I'm in the Youtube site, I can navigate within it and play other Youtube videos. And when I bookmark a Youtube site, I can use that bookmark to return to Youtube.
The crashes occur only when I type Youtube's URL into my browsers' address windows. And since they occur with all three of my browsers, I have to think the fault is in my OS.
I have a G4 Mac laptop WITHOUT an Intel chip, using OSX10v10.5.8.
What might I do to fix this?
Further:
At about the same time the above problem arose, I could no longer play any FaceBook videos. Error message: "Upgrade to latest Flash player". But I HAVE the latest Flash version (10.0.12.36) that my NON-INTEL Mac, a G4 with OSX10.5.8. can support. And it had been working on FB.
(Note: the Adobe Flash Player site offering Flash upgrades for OSX10 specify that the upgrades are only for machines with Intel chips.)

Thanks!
But when I go to the link you gave me, I see a number of candidates for further download, three saying "Mac". Which should I use, please?
In the folder simply marked :10_1r102_64" are:
flashplayer10_1r102_64_mac_sa.app.zip @ 8.1MB
flashplayer10_1r102_64_ub_mac.dmg @ 7.6 MB
and in the folder marked: "10_1r102_64_debug" is:
flashplayer10_1r102_64_ub_mac_debug.dmg
I'll gladly install whichever one you say, but I'll be amazed (and delighted!) if that stops my browsers from crashing whenever I enter http://www.youtube.com in the address window. I can play youtube videos and navigate the site once I reach it using a link from another site, but if I enter http://www.youtube.com in the browser window and hit Return, the colored wheel rotates for several seconds, then the browser crashes. Happens with Safari, Firefox and Netscape, so I suppose the bug must be in the OS. I Repaired Permissions - didn't help. Disc First Aid verifies as OK.

Ability to use special URL to the file inside HTMLResources in a Web Content Overlay's "URL or File" field

Hi guys,
Here is the idea of this:
https://forums.adobe.com/thread/1712927#7217892
Thanks.

Don't now if it's the recommended way, but we're doing this with the context-param elements of the web.xml file.
Example :
<web-app>
<display-name>MyWebApp</display-name>
<description>
A sample Web Application
</description>
<context-param>
<param-name>driver</param-name>
<param-value>org.postgresql.Driver</param-value>
</context-param>
<context-param>
<param-name>url</param-name>
<param-value>jdbc:postgresql://mydbhost/mydbname</param-value>
</context-param>
<context-param>
<param-name>user</param-name>
<param-value>dummy</param-value>
</context-param>
<context-param>
<param-name>password</param-name>
<param-value>garbled</param-value>
</context-param>
<session-config>
<session-timeout>60</session-timeout>
</session-config>
</web-app>
In our Web application, we read those values in the following way :
public class MySVCImpl implements ServiceLifecycle, MySVCIF {
public void init(Object context) {
ServletEndpointContext seContext = (ServletEndpointContext) context;
ServletContext sContext = seContext.getServletContext();
String driver=sContext.getInitParameter("driver");
String url=sContext.getInitParameter("url");
String user=sContext.getInitParameter("user"),
String password=sContext.getInitParameter("password"),
Hope this helps.
Mark

Custom URL Categories

I run a url whitelist and blacklist on my S650 and I have noticed some strange behavior.
If I put "somesite.com" in my blacklist it will block the base url "somesite.com". It will not, however, block "www.somesite.com". If I put ".somesite.com" it will block "www.somesite.com" but will not block "somesite.com". Is this intended? Do I have to put "somesite.com, .somesite.com" for every url?
Thanks

RBC,
This is the intended behavior. It's the way that the simple match works. You can use regex matching to only specify the domain, but regex uses 10+ times the amount of cpu for matching.
I recommend never using regex unless you need to match a path.

WSA how to filter HTTPS urls without decrypting

In transparent mode HTTPS Proxy must be activated for HTTPS traffic.
If you don't want particular users to access certain https sites with out decryption , you can define those urls in custom url categories and under decryption policies :
1. Exclude that custom url category from global decryption policy
2. Create new decryption policy for those identities you want to block request and then under categories include that custom url. Default action you will get for this category is monitor .
3. If you leave it as such then it continues to evaluate the client request against other policy group control settings, such as web reputation filtering or you can use drop action if you do not want to pass the connection request to the server. The appliance does not notify the user that it dropped the connection.
HTH
"Please rate useful posts"

Dear Kush
Thanks for the reply.... you advise to start with a new Decryption Policy for Guest users. So I have now created several Decryption Policies, for Guests, Authenticated Users, VIP Users. The Guest URL Filtering is set to DROP many Categories and to Pass Through the rest, and the VIP Policy drops only the worse categories (Porn, etc) and Pass Through most. If I set the HTTPS Filter=Monitor, then it will decrypt.
I think it is working as I need it, but as a Guest User I can still bypass the Ironport block by entering http://www.youtube.com into Internet Explorer v8 (XPsp3) - However, on the same PC with Firefox v28 https://www.youtube.com is blocked. (IE8 detects the traffic as "SRCH" traffic to 74.125.21.95:443, Firefox detects category "VID" to 74.125.196.91:443)
I'll do some more testing, then feedback to the forum again...
Martin
PS. What I don't like about the solution: I need to setup two sets of URL Category Filters: for the HTTPS proxy (under Decryption Policies) and for the HTTP proxy (under Access Policies) - even though I want the same Group based filters for HTTP and HTTPS. I did not expect to have to setup two separate sets of filters.

How can we navigate from URL Name like (Youtube) to the actual website

Hi,
We have two columns in our report i.e URL NAME and Actual site.
In URL NAME column, we have YOUTUBE,GOOGLE etc.
In Actual site, we have www.youtube.com,www.google.com etc.
How can we make user navigate by simply clicking the URL Name GOOGLE to the actual website www.google.com.
Can it be possible?? Please help!
Thanx.

Hi,
Thanks for the reply..
The solution provided is not working. It is showing the error-
[nQSError: 10058] A general error has occurred. [nQSError: 27002] Near <<>: Syntax error [nQSError: 26012] . (HY000)
SQL Issued: SELECT Dashboard_Fact.SDBusiness_Area_Comment, Dashboard_Fact.SD_Status, SDBussiness_Area_Dim.SDBusiness_Area_Name, SDLink_Dim.SDLink_Url, VOCBusiness_Area_Dim.VOCBusiness_Area_Id, case when SDLink_Dim.SDLink_Url is not null then <a href = http:// SDLink_Dim.SDLink_Url /a> FROM service_delivery
Actually its not even taking the case statement in the name column.There is some error in the syntax i suppose.

Play YouTube Video Using Movie URL

InDesign CS3
Hello,
Is it possible to insert a movie that uses a URL to a video on YouTube? YouTube URL's do not contain the actual file name/type and I believe that is why I am unable to play the video - however I thought I would check and see if anyone has had success doing this.
My goal is to be able to play the YouTube video within the exported PDF.

http://www.youtube.com/watch?v=Go8zwKFyT-0
Worked for me.

Invalid URL when pasting YouTube URL into YouTube or HTML widgets?

Any known fix for INVALID URL WHEN PASTING URL OR EMBED CODE INTO YOUTUBE AND HTML WIDGETS?
And video doesn't play on the widget window but rather opens YouTube OUTSIDE of mu website separately!
It appears A LOT of people have had this Problem!

It's very simple.
This is what you paste in the URL field of the YouTube widget :
http://www.youtube.com/watch?v=cbvdzQ7uVPc
And this is the embed code from the YT page. Paste it in a HTML Snippet.
<iframe width="560" height="315" src="//www.youtube.com/embed/cbvdzQ7uVPc" frameborder="0" allowfullscreen></iframe>
And in case you won't see anything in the HTML snippet, either publish the page to see the result or add http: before the //.
As you can see I haven't a problem. Probably because I'm not a lot of people.

Play Video from Youtube URL

I would like to create a Flex Video player with a text box.
User can enter a Youtube video URL, such as http://www.youtube.com/watch?v=wuEcLjbUS1E and the video plays.
Any way to accomplish this?
PrimoDolce

This code works:
<?xml version="1.0" encoding="utf-8"?>
<mx:Application xmlns:mx="http://www.adobe.com/2006/mxml">
<mx:Script>
    <![CDATA[
      private function playVid():void{
        navigateToURL(new URLRequest(txt.text), '_blank');
    ]]>
</mx:Script>
<mx:TextInput id="txt" width="100%"/>
<mx:Button label="View" click="playVid();"/>
</mx:Application>
If this post answers your question or helps, please mark it as such.

How to find out which URL Category (many) URLs belong to - via script

Hi,
It's about AsyncOS7.5 on WSA S360.
After implementing URL Filtering I have following problem:
If I'd like to access amazon.de for example, there are plenty of other Web Pages referenced too.
Some of them belong to allowed URL Categories and others to forbiden ones which makes the visited URL
not show up properly.
Since some times there are about 15 URLs affected I don't like to test each of them with the Policy Tracer
in order to find out which ones are allowed and care for the others.
Instead I thought of using a command or a script with a list of URLs for a much faster solution.
Is there any such posibility?
Thanks
Jannis

Hi Jannis,
If you only would like to find the category of multiple URLs in one go so you can then compare to your policy (so you know which one is allowed and which one is blocked), you can use this portal (Cisco CCO ID is required to log in).
https://securityhub.cisco.com/web/submit_urls
Under Lookup or Submit URLs tab you can enter multiple URLs and select the AsyncOS version to get their categorizations.
On the scripting side, maybe it can be done outside the WSA so your client will send the request of the multiple URLs to the WSA and WSA returns their categories (with block page or response from WSA).
Perhaps a scripting master here can add more information to your query.
Thanks,
Donny

Route to WSA based on destination

Dear
I need to purchase two Iron port box one for ADSL line and second for Leased Line
My aim Is when user open busineed site is go through Leased line and when open Un Business Site is go to ADSL
I need soultion to achive this ?
and i can predfine the Business and un business Site ?

Hello,
Unfortunately the WSA cannot control which requests get sent to it, it simply listens for traffic coming to its interface on specific ports (80, 3128, 21, 443). When it comes to specific URLs being routed to one WSA or another it will require that you have a device that can inspect the traffic at Layer 4 (HTTP/HTTPS/FTP) and make a routing decision based on the URI in the HTTP header.
You could add a 3rd WSA to route the traffic using an upstream proxy configuration. You would use proxy groups and routing policies to match Custom URL categories or predefined URL categories to send to one of the two upstream proxies.
Other than adding an additional device to route the traffic, you could look into Policy based routing or using multiple WCCP services (one for each WSA) and creating an ACL to match the business sites IP addresses vs the non-business sites. This could become an issue as most websites use dynamic IP schemes.
Hope this helps.
Best Regards,
Michael Hautekeete
Customer Support Engineer
Cisco Content Security - Web Security Appliance
http://www.cisco.com/en/US/products/ps11169/serv_group_home.html
https://supportforums.cisco.com/community/netpro/security/web
https://supportforums.cisco.com/community/feeds?community=2091

WSA access logging for HTTPS traffic

Hi,
We have a WSA s370 with AsyncOS version 7.5.1-079 and it is configured as a transparent proxy.
HTTPS proxy is enabled and all the URL categories set to pass through ( no decrytpting or monitoring ).
Seems like the WSA does not generate logs for HTTPS transactions.
I would like to know whether this is the expected behaviour.
Is there any way that I can monitor HTTPS transactions without decrypting ?
Thanks,
Wipula.

In addition to what Ken mentioned, the only way you can monitor HTTPS traffic without decrypting it will be done so using the IP address.
In the access logs, you will see the following transaction when accessing an HTTPS site (google for example):
TCP_CONNECT 74.125.101.50
It will only report URLs once decrypted. At that point, it is just HTTP.
-Vance

WSA Slow Performance

Hi All,
I have recently deployed a single S650 in a customer environment which currently running in pilot mode with a few hundred clients. The box is configured in Forward Proxy Mode (non-inline), and we have URL Category Filtering and WebRoot enabled. (no McAffe). Also have AD Authentication enabled using NTML Realm. DNS is using two internal Windows DNS Servers.
We have received feedback from some end users that the performance of browsing certain websites has slowed down considerably since using the new proxy server (2-3 times slower loading). The sites they are browsing usually have a lot of dynamic content (eg www.bbc.co.uk, www.news.com.au, www.abc.net.au/news). At the moment this is purely subjective feedback, but I have no reason to doubt them.
The previous proxy solution they had been using also had URL Categories blocked (using Surf Control/MS Proxy), and the category list is the same as what we have blocked on the S650.
What I'd like to know is if this type of performance hit is to be expected when all of the security services are enabled ? Can anyone else share their experiences ?
I'm running a late build of AsyncOS 5.2 (build 467 ?).
Regards,
Jeff

JBrown,
There will be some kind of delay added, being that the WSA has to scan the objects, but as long as you are not over encumbering the WSA, this should be negligable.
Off the top of my head, one issue that can cause this is poorly written regex rules in categories. If you have any categories that use regex, make sure they do not contain unneccessary ".*" entries.
Examples
Bad: .*google.com, .*.yahoo.com
Good: google.com, \.yahoo.com
Since regex is a substring match, you do not need the ".*"s and it lowers performance greatly.
Just a thought. If you have no regex rules like this, I would recommend filing a support ticket so support can take a look at it.
How long are the pages taking to load? Are they loading in one object at at time? Or are is the whole page blank for a while then the entire page displays?

URL Categories in WSA inside Youtube

Similar Messages

Maybe you are looking for