Sonicwall Signatures

Application: Avica

YTD Downloader is an application used to download videos from various websites and convert them into video files that can be easily stored and watched without needing internet connection. This application accepts the URL of the video a user wants to download. It then connects to the URL and stores and converts the streaming video into a file. So far, aside from YouTube URLs, all other downloads look like normal traffic and may cause false positives. For YouTube videos, a signature was created to detect downloads by this application. Please note, this signature will only work when DPI-SSL Client Inspection is enabled. This is becauseYouTube HTTP requests are protected by SSL protocol. DPI-SSL CI is required to apply control to outgoing SSL connections.