Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Our organization has launched a training program for employees. the hosting server(internal), has YouTube videos embedded. we have YouTube blocked, and employees access the internet via proxy. How can I allow these specific videos while keeping the YouTube blocked.

Our proxy is not capable of picking URLs of video so we cant configure the URL-based access. We have perimeter firewall and proxy is integrated with domain controller.

share|improve this question

closed as off topic by rook, Adi, AJ Henderson, Jeff Ferland May 1 '13 at 22:51

Questions on Information Security Stack Exchange are expected to relate to Information security within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

The irony is that its easy for employees to bypass this but difficult for the company to display its own videos on youtube. – rook May 1 '13 at 21:17
Can you filter based on the HTTP Referrer or not? If so, you can permit requests which have the Referrer set to URIs on your internal server, and otherwise block. Note that the Referrer is relatively easy to spoof, so it won't work for the most tech savvy employees you have. – Matt May 1 '13 at 21:36

You can't, not without doing some specialized configuration in the proxy server (which doesn't seem possible here).

The easiest thing to do would be to download the youtube videos (or find the originals), convert to a format which most computers recognize (.avi or .mp4), store locally on your hosting server, and embed in your webpage via <video>.

share|improve this answer
Downloading video will be the last solution right now. someone suggested me to try reverse proxy to control the traffic back and allow the whole youtube through forward proxy. Is it possible to use any free proxy tool to configure a reverse proxy for this solution. But then again, i am not sure which proxy can allow the URL fetch of video. – sachin May 1 '13 at 22:12

Are these your videos or someone elses? If they are your videos, then I would try some form of internal hosting. If they are not, perhaps you can ask for permission from the owner to use them for your internal purposes (unless they are already on some open form of license). It is relatively easy with browser plugins, websites, etc. to extract the specific videos you need. It sounds like you have a web server internally so you can just use some type of JavaScript player to play the videos.

If these are third party training materials that link out to YouTube, I would try to work with the vendor to see if they have any specific solutions to address this.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.