Use Case: Block Youtube category but allow some specific youtube video ID(full path url)

Hi Soon,

Thank you for your comment and query in the Cato Community channel!

So as you have stated correctly, you cannot use Application Control Policy with a block INET FW rule, this is because the traffic needs to be allowed before we can process the traffic further within the Cato stack.

Also at this time (I have also attempted to lab this myself to confirm), you cannot use a Full Path URL in the INET FW stack, as I was attempting to create an exception rule and add the Full Path URL which was not accepted.

I would politely suggest in this use case is to create an RFE and raise it with your respective Cato customer service representative. 

Or raise a support ticket (if not already done so), and request an RFE for Full Path URL to be added into INET FW stack.