Zero Trust Gateway Firewall Policy rule not recognizing Youtube application

What is the name of the domain?

Additional information

DNS policies

What is the error number?

No error

What is the issue you’re encountering

I’ve had a policy for over a year that seems to have recently stopped recognizing the filter criterion of Application with YouTube. Now, when I browse to YouTube the exception I had created isn’t being recognized and the rule is not taking effect.

What steps have you taken to resolve the issue?

I have tried changing the filter criteria as a test to look for domain match for youtube.com and this does match properly. When I revert back to Application YouTube, the filter stops working again.

What are the steps to reproduce the issue?

This could be a bug in the traffic expression mechanism, but I doubt it. This particular traffic expression has two parts - the first is a content category selector with a boatload of categories selected and I specifically included Video streaming. That content category selector is paired with an AND to the next selector of Application where I’m doing a “not in” for a value of “YouTube” selected from the populated list. The effect of this is to exclude any video streaming services unless it is specifically the YouTube application. Again, if I change the second selector from application to regex does not match and put in youtube.com (appropriately regex’d) as a value - then Youtube will function properly again.

1 Like

following