Answer

PROBLEM

Certain internet streaming media players using the RTMP/RTMPS protocol bypass the WebMonitor filtering and are not blocked.

ENVIRONMENT

• GFI WebMonitor
• All Supported Environments

SOLUTION

To block streaming media over RTMP/RTMPS, TCP port 1935 needs to be added to the Firewall block list.

Once this port is blocked, the player will fall back to HTTP and can be blocked by WebMonitor.

RTMPS falls back to HTTPS, so for WebMonitor to be able to block this, HTTPS scanning must be enabled.

CAUSE

Some internet media streaming sites use the RTMP/RTMPS protocol, which works on TCP port 1935, and therefore they bypass the web filtering and  web security policies configured in WebMonitor.