MX84 can't filter youtube either using L7 or setting group policy in chrome or firefox

[herver]

Can anybody experienced in the problem of cannot filter youtube in chrome or firefox using meraki MX84?

[Brash]

The L7 firewall rules most likely aren't working as a lot of Google services use QUIC by default - which L7 firewall rules won't pick up.

You'll need to use L3 firewall rules to block outbound UDP port 80 and 443.

That will force Youtube traffic to revert to HTTP/HTTPS which the L7 firewall rules should apply to and block.

Other than that, you can try blocking "*.youtube.com" in L3 firewall rules.

[antonis_sp · Accepted solution]

We are blocking youtube and all streaming services with Layer7 rules combined with Content Filtering.

You will need SEC license for the MX for Content filtering though.

[cmr]

As @Brash has mentioned, you need to block QUIC to control this.  Traffic on UDP port 443.