Pages

February 28, 2012

Apple can’t connect to Youtube behind TMG

I run a TMG 2010 at home as my reverse proxy for Lync and Exchange lab. But internal I had some complains from Apple Iphone / Ipad users including myself I couldn’t stream Youtube Sad smile
Found out that Apple Youtube app doesn’t like the forward proxy in TMG…
But how to resolve it? I know, you want to have a proxy for monitoring, scanning etc. But for me at home and maybe in some office scenario’s this might help to allow iPad and iPhone users to stream their video’s.
In the TMG console in the Web Access group I created a new rule:
Give the new rule a appropriate name and hit next:

image
Its still useful to allow the traffic:
image
Choose to add protocol and choose new protocol, No we are not using the HTTP, we going to create a new protocol outbound for port 80, so here we go:
image
In my name convention I always use for predefined protocols the convention:
protocol /\ number [/ = outbound and \ = inbound] so in my case TCP/80
image
Choose new and specify here outbound tcp 80 to 80:
image
Choose no for secondary connections:
image

And Finish the new protocol wizard;
image
Add the created protocol:
image
Define your sources who can use this rule. This can be a complete network or a group of computers or a specific subnet. In my case I use internal network and VPN clients;
image
In the destination I choose to create a new URL set as I only want *youtube.com/* to use this rule. Click new and choose URL set:
image
And entered the url and it OK:
image
Add the new created URL set and hit next:
image
As we need to be anonymous choose all users:
image
And we are almost done. Hit finished:
image
If you were smart to copy the Allow Web access rule you need to disable (clear) Force fulle content request in the malware inspection tab:
image
Then apply the changes :
image
Let’s monitor the network:
I specified the iPad ip to monitor real time. You see the normal web proxy still works for all other traffic:
image
And when I open the Youtube app from the ipad:
image
You might also see in your monitor that the rule give a connection aborted, but the stream continues on my ipad. When I look in the error it still refers to the Web Proxy filter and for me looks like it categorize the link but does further nothing.
image
So I need to figure out what that exactly is. For now my wife and her son are happy they can use iphone and ipad to stream youtube videos.

1 comment:

  1. Love your work, thanking you very much, this was starting to become a major headache for me!

    ReplyDelete

Search This Blog

Loading...