Thursday, September 3, 2020

Mikrotik Block Youtube Apps using Layer 7 Protocol

Youtube access is restricted in almost every corporate network. Only those who need it, get access, while others have no access to it. Usually if we apply the restriction using the firewall of mikrotik router, then the users will be blocked from the web access of youtube, but they will get access with youtube apps.

To block youtube apps we need to take the help of mikrotik's "layer-7 protocol" feature. There some kind  of "RegExp Code" is written. Later,  restrictions are applied using those code. One screenshot is given below. 


The regexp code for blocking Youtube apps is given below: -


^.+(ytstatic.l.google.com|youtube-ui.l.google.com|youtubei.googleapis.com|youtube.googleapis.com|youtube.com|www.youtube.com|m.youtube.|.m.youtube.|ytimg.com|s.ytimg.com|ytimg.l.google.com|youtube.l.google.com|i.google.com|googlevideo.com|youtu.be|youtube-nocookie.com).*$


How to block youtube apps using layer-7 protocol is discussed step by step below.


First we will go to the layer-7 protocol from the firewall.


Now we will give a name for “Layer-7 protocol”, then we will write the regexp code and then "apply" and then "OK".


Now we will create a filter rule from the firewall and will go to the “Advanced” tab.


Now we will select the rule we created in “Layer 7 Protocol”. 


Then we will select “Drop” from “Action”.


Finally we will click on "apply" and then click on "OK". From now on youtube web access will be blocked as well as access through apps will be blocked.

If you have multiple firewall rules or access rules configured then please make sure you have placed this rule in the right sequence. If you are not sure about that, then place this rule at the top of all of your firewall rules. Just drag it on the up way and drop it at the first position and make sure the rule sequence number is "0". Just like below.


Thank you

No comments:

Post a Comment