It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Enforce YouTube for Schools in the Firewall

  • Last updated on

Google will turn down YouTube for Schools July 1, 2016 and is offering current YouTube for Schools users and all G Suite users a new way restrict YouTube content, per this Google article.

If you already have a YouTube for Schools token, you can continue using YouTube for Schools with the Barracuda NextGen Firewall until July 1, 2016. Google has stopped issuing YouTube for Schools tokens.

The Barracuda NextGen Firewall F-Series can transparently add YouTube for Schools restrictions for all connections that the firewall forwards to YouTube without the need to configure the clients. Enable YouTube for Schools for access rules matching HTTP and HTTPS traffic connecting to YouTube.


  • YouTube for Schools relies on YouTube to honor and filter the search results. The firewall can enable this feature, but the execution is left up to YouTube.
  • YouTube for Schools is not enforced for mobile YouTube apps.

In this article

Before You Begin

Step 1. Enter the YouTube For Schools Token

The YouTube for Schools token is a unique ID identifying your YouTube for Schools account.

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > Firewall > Security Policy.
  2. Click Lock.
  3. In the Safe Browsing Configuration section enter the YouTube for Schools Token.
  4. Click Send Changes and Activate.

Step 2. Create an Access Rule to Enforce YouTube for Schools

You can enforce the usage of YouTube for Schools for all web traffic that matches an access rule by enabling the YouTube for Schools settings in the Application Control 2.0 settings of the access rule.

  1. Go to CONFIGURATION > Configuration Tree > Box > Virtual Servers > your virtual server > Assigned Services > Firewall > Forwarding Rules.
  2. Click Lock.
  3. Either click the plus icon (+) at the top right of the ruleset, or right-click the ruleset and select New > Rule.
  4. Select Pass as the action.
  5. Enter a Name for the rule. For example, YTFS-LAN-2-INTERNET
  6. Specify the following settings to match your web traffic:
    • Source – The source addresses of the traffic.
    • Destination – Select Internet.
    • Service – Select HTTP+S
    • Connection Method – Select Dynamic SNAT.
  7. Click on the Application Policy link and select:
    • Application Control – required.
    • SSL Interception – Required for search providers that are available exclusively via HTTPS.
    • YouTube for Schools – required.
  8. (optional) Set additional matching criteria:
  9. Click OK.
  10. Click Send Changes and Activate.

Only YouTube videos that have been added to your YouTube for Schools channel can now be accessed via this access rule.

Last updated on