Answer
PROBLEM
Certain internet streaming media players using the RTMP/RTMPS protocol bypass the WebMonitor filtering and are not blocked.
ENVIRONMENT
- GFI WebMonitor
- All Supported Environments
SOLUTION
To block streaming media over RTMP/RTMPS, TCP port 1935 needs to be added to the Firewall block list.
Once this port is blocked, the player will fall back to HTTP and can be blocked by WebMonitor.
RTMPS falls back to HTTPS, so for WebMonitor to be able to block this, HTTPS scanning must be enabled.
CAUSE
Some internet media streaming sites use the RTMP/RTMPS protocol, which works on TCP port 1935, and therefore they bypass the web filtering and web security policies configured in WebMonitor.