There are a couple possible ways to approach this. Do you have an MX appliance with the Advanced Security license? If so, you could go to the Content Filtering page, in the "blocked URL patterns" you can put the wildcard character * and then in the "Whitelisted URL patterns" you can put youtube.com and youtu.be for example. You might find you need to whitelist a couple ancillary domains as well.