In previous releases, a special policy had to be installed to force YouTube videos to be cached. SGOS 6.5.x or later enables the CachePulse feature to cache YouTube videos without the need to install the policy manually.
In some cases, however, the ProxySG or Advanced Secure Gateway appliance still does not cache YouTube videos, even though the enabled CachePulse database is up to date. This article details how to troubleshoot this issue.
1. A valid license for CachePulse with the latest update downloaded 2. An SSL interception policy to intercept YouTube traffic 3. The following policy in order to prevent an unsupported_encoding error users browse to https://www.youtube.com using Firefox or Chrome (IE is not affected):
If all of the above steps have been applied to configuration, YouTube video access should be cached. If the issue persists, take the following steps to further troubleshoot the issue:
Make sure that the YouTube traffic is being SSL intercepted in the policy by verifying the issuer of the website certificate where the certificate issuer comes from the ProxySG and not the website itself.
Create an access log to just log YouTube video traffic, then apply it in the policy. Below is an example:
Note the cache hit codes like the one above - "TCP_HIT".
TCP_MISS - Object not found in cache, downloaded from the OCS.
TCP_HIT - Object found in cache.
TCP_NC_MISS - The request was made for an object that can't be cached.
TCP_REFRESH_MISS - Appliance had the object in cache, but a check with the OCS (GET with the If-modified-since) indicated that the object was stale. Object was downloaded from the OCS and the new object was placed in cache.
View the ProxySG's Active Sessions table on the Statistics tab to further verify this.