Cisco Cisco Web Security Appliance S670 Troubleshooting Guide

Contributed by Dan Waller and Siddharth Rajpathak, Cisco TAC
Engineers.

Jul 31, 2014

How can I configure the WSA to only allow users to view a specific YouTube channel but block all other
streaming media.

Environment: All Cisco Web Security appliances running AsyncOS 7.1.x & above

YouTube videos from the channel page typically include a unique identifier in their hyperlinks for all videos
from that channel.

This article assumes that the "Streaming Media" category is set to Block in the Access Policies.

In order to allow videos from the specific channel, you will need to set up the following:.

1. Go to Web Security Manager > Custom URL Categories and create a new category labeled
'YouTube'

2. Add the following entries to the Sites field:
ytimg.com, .ytimg.com

3. Add the following entries to the Regular Expressions:
www\.youtube\.com/.*<ChannelName>
youtube\.com/videoplayback
www\.youtube\.com/crossdomain\.xml
youtube\.com/generate

4. Go to Web Security Manager > Access Policies and create a new policy.

5. Choose an Identity to apply to the new policy or select the 'YouTube' custom URL category as a
membership criteria.