Block only youtube with Endpoint firewall 10.6

[lhernandez]

I create a options rule blocking www.youtube.com, but this block www.google.com and google drive.

I not understand why. Is possible block youtube only with ENS firewall?  

[patrakshar · Accepted solution]

I think your answer is available in the below post 

https://stackoverflow.com/questions/5142030/why-does-the-resolved-ip-of-youtube-com-direct-to-google...

 When I ping Youtube.com the IP i get, with that IP i am able to open google.com page. 

In backend Firewall will convert the web address to IP address. So to me it is working as per design here.

[jess_arman]

@lhernandez As Patrakshar mentioned, you could find the IP of the site to block via firewall. However, the module that is designed for the purpose of blocking access to specific websites is the Web Control module. You would simpley modify your Endpoint Security Web Control "Block and Allow list" policy to block access to YouTube. You can learn more about this in the ENS Web Control Product Guide, PD27586.

Was my reply helpful?

If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

[ktankink]

Is possible block youtube only with ENS firewall? 

Using the ENS Firewall to block web domains relies on local Windows system DNS resolution.  When the system/user requests access to the Internet site via a non-proxied application, the Windows operating system will perform a DNS lookup for the domain to resolve to the IP address of the blocked domain (e.g., youtube.com).  ENS Firewall will then cache the IP address results of the DNS query and set a block rule for that IP (since it resolves to the blocked domain).  If that same IP address is also used to connect to a www.google.com site, then the Firewall will block it as well; not because www.google.com is a blocked domain, but the IP address being used (for both sites if applicable) is blocked (at least until the ENS FW cache expires).  Since Youtube is owned by Google, you might be hitting the same blocked IP for both websites.

If you want to switch to blocking Youtube.com by IP address only, this will be very hard to do unless you know exactly what IP addresses Google uses to host the youtube.com website today and in the future; it will be very hard to maintain this blocked IP address list.