Description

To conserve bandwidth, you want to be able to block social media streaming sites, like Facebook or YouTube via SSL/HTTPS. This article provides the recommended Junos OS version for doing this.

Symptoms

  • You configured Application-Firewall rules on your SRX to block Facebook and YouTube, but the sites can still be accessed.  Your SRX is running Junos OS 12.1X44.
  • Not able to block Youtube
  • Cannot block Youtube

Solution


Beginning with Junos OS 12.1X47-D10, Junos OS uses the next generation application identification signatures (also known as App-ID 2.0).  With App-ID 2.0, it is able to more effectively detect application signatures for sites that uses SSL or HTTPS as the communication mechanism. 

If you want to block Youtube, Facebook, or any other applications that uses SSL/HTTPS, it is recommended to upgrade to Junos OS 12.1X47 or higher.