Skip to main content

Problem

Security teams need predictable control over app and web usage to reduce policy bypass and data-risk exposure.

Benefits

You can enforce policy decisions consistently with SafeSquid while preserving legitimate business workflows.

Advantages

You keep actionable policy control close to operations, with verifiable outcomes in logs and policy behavior.

Call to action

Use the steps in this guide to implement the control, then validate behavior with a real user-flow test.

Allow or block YouTube by category via YouTube API

YouTube offers entertainment and educational content; unrestricted viewing can reduce productivity and bandwidth. SafeSquid integrates with the YouTube API to identify video categories. Policies can allow or block specific categories so organizations permit learning and marketing content while blocking unrelated videos.

Client scenario (case study)

Ganpat University provides graduate programs to various colleges. All the staff’s PC/Laptop traffic is going via SafeSquid SWG. Ganpat University wants to block entire youtube.com for faculty and students, but wants some of the YouTube channels allowed which are helpful for faculty/students. Ganpat University challenges are: All staff/Students should not be allowed to access www.youtube.com. If any faculty/student try to access YouTube then he/she should get blocked template. Only few of the specified YouTube channel and its playlist should be allowed. These YouTube channel contains educational and knowledge sharing videos. SafeSquid SWG give them solution for the above requirement. You can achieve this by creating policy in Request Profiles Section and bind it with policies in Access Profiles Section. You need YouTube Channel-ID and List-ID of playlist, you want to allow. You have to extract Channel-ID and List-ID of the playlist from YouTube URL before creating policies in SafeSquid.All the Mr. Haresh is the system administrator of Ganpat University. From last few months he received the request from faculty for allowing many other videos/Playlist/channels etc. Of course, all the videos/Playlist/channel etc. are educational and knowledge sharing. But he faces some difficulty for extracting Channel-ID and List-ID of the requested playlist/channel regularly. SafeSquid SWG has given them the fantastic solution for Mr. Haresh difficulty. The latest Version of SafeSquid (Versions August onward) includes YouTube API Integration with SafeSquid-SWG. That means you can now create Policies on the basis of YouTube Categories. You can now allow/block specific category of videos on YouTube. Find category to allow or block Youtube video

Prerequisites

HTTPS Inspection should be enabled in SafeSquid. If not enabled, you can check our document - How to enable HTTPS Inspection

Create a YouTube V3 API using your Google Account.

To Request the Category of Specific Video To extract Video Category from Video ID Go To https://console.developers.google.com/apis/library Link Create a Youtube V3 API using google account for Youtube API integration with safesquid :::note What happens over here is If you don’t Create a Project over here, Google will Automatically Create a new Project for you Named as “My First Project” when you ENABLE the YouTube Data API v3. ::: People doing it for the first time and have requirement to use YouTube Data API v3 to integrate it with SafeSquid-SWG. I recommend creating a New Project with a Proper name so that you can later identify it. Since they have specified Per Day Quota i.e. No of Request to find Information about a Particular video and its details. Make sure that this Google Account is not using YouTube API for any other purposes as this will reduce the No of Request

CREATE A NEW PROJECT

Click on select a project to integrate Youtube API with safesquid Click on project to integrate Youtube API with safesquid

Name as: YouTubeAPI-For-SafeSquid

Name and create a project to integrate Youtube API with safesquid Redirect to API Library in API & Services section

Select a project

Select a project to integrate Youtube API with safesquid Get a access of API Library Select YOUTUBE DATA API V3 to integrate Youtube API with safesquid

Enable YouTube Data API V3

ENABLE YOUTUBE DATA API V3 to

Create credentials

Select a Create credentials to integrate Youtube API with safesquid Click on Create credentials to integrate Youtube API with safesquid

Select API key

select API key to create API keys Google generate Youtube API keys

Integrate the YouTube API Key in SafeSquid.

To identify the category of the YouTube video Now we are going to Integrating this Key in SafeSquid-SWG. To do that, Go to SafeSquid console. Go to the path using below command:
Create the directory using below command:
Give the permission using below command: chmod 774 youtube chown ssquid:root youtube root@safesquid-swg:/var/lib/safesquid# ll total 56 drwxrwxr— 12 ssquid root 4096 Aug 29 15:35 ./ drwxr-xr-x 48 root root 4096 Jul 4 19:06 ../ drwxrwxr— 3 ssquid root 4096 Jan 21 2019 application_signatures/ drwxrwxr— 2 ssquid root 4096 Sep 5 14:03 category/ drwxrwxr— 3 ssquid root 4096 Apr 2 18:44 content_signatures/ drwxrwxr— 2 ssquid root 4096 Jan 21 2019 imgfilter/ drwxrwxr— 3 ssquid root 12288 Sep 5 13:47 sqscan/ drwxrwxr— 3 ssquid root 4096 May 30 14:17 sscore/ drwxrwxr— 4 ssquid root 4096 Sep 5 14:03 sscore2/ drwxrwxr— 2 ssquid root 4096 Jun 13 19:12 ssqore/ drwxrwxr— 4 ssquid root 4096 Sep 5 14:03 svscan/ drwxrwxr— 2 ssquid root 4096 Aug 23 14:53 youtube/ Go to youtube directory using command: root@safesquid-swg:/var/lib/safesquid#cd youtube Copy YouTube API Key using WinSCP or any other tool at given path /var/lib/safesquid/youtube/ root@safesquid-swg:/var/lib/safesquid/youtube# ll total 16 drwxrwxr— 2 ssquid root 4096 Aug 23 14:53 ./ drwxrwxr— 12 ssquid root 4096 Aug 29 15:35 ../ -rw-rw-r— 1 ssquid root 40 Jul 3 14:11 keys -rw-rw-r— 1 ssquid root 947 Jul 3 14:12 legends After adding key, the file will look like this root@safesquid-swg:cat /var/lib/safesquid/youtube/keys AIz******************************o After adding the API key, restart the SafeSquid service from the SafeSquid Interface or via command line:
:::note Please Restart SafeSquid Twice in order to Integrate YouTube API properly. ::: You have successfully integrated YouTube API with SafeSquid-SWG. Now, Go ahead with Policy creation on the basis of YouTube Categories. To do so, I will help you out in creating a simple Policy which will only allow Specific YouTube Category VIA SafeSquid all other YouTube Videos will be blocked. Click on configure to integrate Youtube API with safesquid Policy to integrate Youtube API with safesquid Youtube Video policy to allow specific video Youtube Video policy to allow specific video