this is the only group policy, and no other rules are applied on the firewall.
I applied the policy on an existing ldap group from the domain the firewall is joined to, but the group users can still open youtube.
I tried the policy per CLIENT, it worked normally, but on domain groups it is not working