cancel
Showing results for 
Search instead for 
Did you mean: 
Bert
Level 7

Youtube movies not playing with iPAD client on MWG 6.8.7

Dear all,

For our WiFi guest clients we use 2 loadbalanced MWG 6.8.7's in a tranparent proxy configuration.  Browsing the internet and playing Youtube movies on Windows based laptops and Windows Mobile / Android based Smartphones are working fine. But we have a problem with our iPAD clients. Normal internet browsing on the iPAD gives no problem. But playing (Youtube) movies (both with Safari and the Youtube APP) is not possible with the iPAD. We whitelisted youtube.com and other movie content sites but this gives no result. Only when we bypass the MWG we can play the Youtube movies  (For this we changed the loadbalancing configuration). So the problem exist only when the traffic is flowing through the MWG's. When I use my iPAD at home with a direct internet connection there's also no problem playing the video's (both with Safari and the Youtube APP). 

Has anyone experience with iPAD clients wanting to play youtube movies and MWG 6.8.7?

Thanks in advance,

Bert

0 Kudos
9 Replies
NetTas
Level 7

Youtube movies not playing with iPAD client on MWG 6.8.7

Not relevant to your problem, but we have just setup Wifi clients in a transparent proxy config using MWG 7.0.2.4 and YouTube works correctly on IPAD ( both App and browser )

0 Kudos
asabban
Level 17

Youtube movies not playing with iPAD client on MWG 6.8.7

Hello,

do you see an error message like "The server is not correctly configured" or whatis the error message that shows up?

Can you add the following to the ICAP Bypass list and run a test with the Youtube App:

"/videoplayback?id="

Additionally you need to make sure that there is no SSL Scanner applying for www.google.com:443. You can add this to the Certificate List and select "Tunnel" as the action in order to bypass SSL Scanner for this.

With those settings access should be possible. Please let me know.

Best,

Andre

0 Kudos
Bert
Level 7

Youtube movies not playing with iPAD client on MWG 6.8.7

Hi Andre,

When I use the Safari browser and starts the Youtube movie nothing happens. Only the 'scrolling, rolling dot'  appears. When I use the Youtube APP the following message is displayed: 'You are not authorized to open this file'.

SSL scanning is not used with this WiFi setup.

After I added: /videoplayback?id= to the ICAP Bypass list the Youtube APP works! Unfortunately not the Safari client.

(I added /videoplayback?=id without the quotes. When I add "/videoplayback?id=" with the qoutes an empty entry is added to the ICAP Bypass list).

Any idea to fix the Safari client?

Thanks in advance,

Bert

0 Kudos
asabban
Level 17

Youtube movies not playing with iPAD client on MWG 6.8.7

Hi Bert,

I don´t have an iPad available today. I will check and let you know.

Best,

Andre

0 Kudos
Bert
Level 7

Re: Youtube movies not playing with iPAD client on MWG 6.8.7

The Youtube iPad / iPhone client works fine. But we still have the playback problem with the Safari client on iDevices.

Has anyone a suggestion to fix that also?

Thanks in advance!

Bert

0 Kudos
gurcanozturk
Level 7

Re: Youtube movies not playing with iPAD client on MWG 6.8.7

Same problem with version 7.1.6.1.0 (12742).

Can't load movies with Youtube App on iPad2. There is no problem with Wifi networks other than networks which routed to McAfee. We are using Transparent Router mode.

Some logs from access.log

[30/Mar/2012:16:25:07 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/zpSlJaP2sHw/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 11664 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:25:07 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/5j0oqOVzYDg/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 9177 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:25:07 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/plVgkc0We_o/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 8972 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:25:07 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/qhux77ihl2E/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 21233 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:25:07 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/x5-w4yoGqG0/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 16928 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:25:07 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/pDjQRgoOcpk/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 7820 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:25:07 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/oyltPmcnZNs/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 9342 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:25:24 +0300] "" 10.16.251.65 200 "CONNECT owa.tmgrup.com.tr:443 HTTP/1.0" "Portal Sites" "Minimal Risk" "" 47589 "" "" "0"

[30/Mar/2012:16:26:37 +0300] "" 10.16.251.65 302 "GET http://redirector.c.youtube.com/videoplayback?id=c79fb0e32a06a86d&itag=18&source=youtube&uaopt=no-sa... HTTP/1.1" "Streaming Media, Media Sharing" "Minimal Risk" "text/html" 1491 "AppleCoreMedia/1.0.0.9A405 (iPad; U; CPU OS 5_0_1 like Mac OS X; en_us)" "" "0"

[30/Mar/2012:16:26:38 +0300] "" 10.16.251.65 200 "GET http://gdata.youtube.com/feeds/api/videos/x5-w4yoGqG0/related?start-index=1&max-results=25&format=2,...[@rel='http://schemas.google.com/g/2005%23batch'],entry(id,title,updated,published,yt:rating,link[@rel='edit'%20or%20@rel='http://gdata.youtube.com/schemas/2007%23video.ratings'],yt:statistics(@viewCount),batch:status,yt:accessControl[@action='list'],media:group(media:thumbnail,media:content[@yt:format='2'%20or%20@yt:format='3'%20or%20@yt:format='8'%20or%20@yt:format='9'](@yt:format,@url,@duration),media:category,mediaSmiley Tonguelayer,media:description,media:keywords,yt:videoid,media:credit,ytSmiley Tonguerivate),app:control,gd:comments) HTTP/1.1" "Streaming Media, Media Sharing" "Minimal Risk" "application/atom+xml" 83641 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:26:38 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/6cWR0yCS9go/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 13108 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:26:38 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/2vAQx1y1CcE/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 8451 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:26:38 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/znSqbA3kWFo/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 8140 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:26:38 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/6Lm3Guw_UN0/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 10637 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:26:38 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/0HhgBq_qb2Y/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 10144 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:26:39 +0300] "" 10.16.251.65 200 "GET http://i.ytimg.com/vi/qAeTifNBYlo/hqdefault.jpg HTTP/1.1" "Content Server" "Minimal Risk" "image/jpeg" 13993 "Apple iPad v5.0.1 YouTube v1.0.0.9A405" "" "0"

[30/Mar/2012:16:26:41 +0300] "" 10.16.251.65 200 "GET http://o-o.preferred.ams03s15.v7.lscache5.c.youtube.com/videoplayback?id=c79fb0e32a06a86d&itag=18&so... HTTP/1.1" "Streaming Media, Media Sharing" "Minimal Risk" "video/mp4" 5328 "AppleCoreMedia/1.0.0.9A405 (iPad; U; CPU OS 5_0_1 like Mac OS X; en_us)" "" "0"

0 Kudos
McAfee Employee

Re: Youtube movies not playing with iPAD client on MWG 6.8.7

Hi All,

This issue has to do with how the application initially requests the video. And the MWG as a security device (by default) will not allow this behavior for security reasons.

The Youtube application on the iDevice uses "Range" headers, and by using this, it expects a "partial" response (HTTP 206). If it does not recive a 206 response, the video will not load.

Range headers are used to request only a small piece of a file. For example:

GET http://youtube.com/video.swf HTTP/1.1

Range: 0-1

This request is requesting the first byte of "video.swf". It may then make a subsequent up request for:

GET http://youtube.com/video.swf HTTP/1.1

Range: 1-

This indicates it wants bytes 1 to the EOF (end of file).

From the Point of view from a security device this is bad behavior for what reason? The entire file cannot be scanned for AV so we cannot guarantee that the file does not have a virus.

In the end you can disable this feature to test and see if this works. The ICAP bypass (on v6) is a more granular way to allow this. On version 7, you could limit it to just the iPads and just youtube.com.

On version 6, you can find the global option Proxies > ICAP Server > Reqmod Settings > "Forbid Partial Downloads (HTTP)".

On version 7, you can find a rule which removes the "Range" header from the client requests, this rule is found under Gateway Anti-Malware and is called "Remove Partial Content for HTTP(s) Requests".

Let me know if you have any additional questions.

Best,

Jon

gurcanozturk
Level 7

Re: Youtube movies not playing with iPAD client on MWG 6.8.7

Thanks Jon.

I created a rule to "Stop Rule Set" action to iOS devices for "Anti-Malware" and it works.

0 Kudos
McAfee Employee

Re: Youtube movies not playing with iPAD client on MWG 6.8.7

I would advise you to tweak that a bit, to not have the Range headers stripped.

Stopping ruleset anytime it encounters a iDevice means that no virus scanning will apply.

~Jon

0 Kudos