Cisco DNS Servers Causing Youtube to stop working

[pixlmixgabriel]

At my site, we use our Domain Controllers for DNS which then forward any unknown requests to Cisco's DNS servers, this is so we can use Cisco Umbrella for filtering. However, every so often, Youtube decides to not respond. We've figured out that changing our DNS server IP to google's resolves this issue but we're unable to do this across site for safeguarding reasons. Does anyone know how we can resolve this?

 

We also use PRTG to monitor the network and have set up a sensor for YouTube; below is the output:

 

 

Failed to establish secure connection [step 0] Socket Error # 10060 Connection timed out. [step 1] Socket Error # 10060 Connection timed out. [step 2] Socket Error # 10060 Connection timed out. [step 3] Socket Error # 10060 Connection timed out. [step 4] Error connecting with SSL. Error connecting with SSL. error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number [step 5] Error connecting with SSL. Error connecting with SSL. error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol [unsecure] IOHandler value is not valid

 

Please help! I've done all the googling I can think of TIA

[pete]

What do Cisco Umbrella support say? Are there any known issues? Is YouTube rate-limiting them?

[pixlmixgabriel]

Hi all, I think it has something to do with this, found after months and months of googling: https://docs.umbrella.com/deployment-umbrella/docs/install-cisco-umbrella-root-certificate

[pixlmixgabriel]

Okay so apparently not, I installed the certificate and it didn't fix it