Technical Tip: How to use video filtering Print Article

Products
FortiGate v7.0

Description

This article explains how to use video filtering.

Solution

With the video filter profile, you can filter YouTube videos by channel ID for a more granular
override of a single channel, user, or video.
The video filter profile is currently supported in proxy-based policies and requires SSL deep
inspection.

To configure a video filter from GUI.

1) Go to Security Profiles -> Video Filter and select 'Create New'.

2) In the Channel override list section, select 'Create New'. The New Channel Override Entry
pane opens.
- Enter a Channel ID and select an Action.

- Select 'OK'.

3) Optionally, enable 'Restrict YouTube access' and select a setting (Moderate or Strict).


4) Select 'OK'.
5) From CLI, enable the YouTube API query:

# config videofilter youtube-key

    edit 1
        set key ********
        set status enable
    next
end

6) Create the firewall policy:

- Go to Policy & Objects -> Firewall Policy and select 'Create New'.
- For Inspection Mode, select Proxy-based.
- Enable 'Video Filter' and select the profile created.
- For SSL Inspection, select 'deep-inspection'.

- Configure the other settings as needed and select 'OK'.

To configure a video filter from CLI.

1) Create the channel filter:

# config videofilter youtube-channel-filter
    edit 1
        set name "channel_filter"
# config entries
    edit 1
        set action block
        set channel-id "UCJHo4AuVomwMRzgkA5DQEOA"
    next
end
    next
end

2) Create the video filter profile:

# config videofilter profile

    edit "channel_filter"
        set youtube-channel-filter 1
        set youtube-restrict strict
    next
end

3) Enable the YouTube API query:

# config videofilter youtube-key
    edit 1
        set key ********
        set status enable
    next
end

4) Create the firewall policy:

# config firewall policy
    edit 1
        set name "video-filter"
        set srcintf "port1"
        set dstintf "port5"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
        set utm-status enable
        set inspection-mode proxy
        set ssl-ssh-profile "deep-inspection"
        set videofilter-profile "channel_filter"
        set nat enable
    next
end

Vimeo.

The video filter profile includes a setting to restrict Vimeo access, which can only be configured
from  CLI.

To restrict Vimeo access.

# config videofilter profile

    edit <name>
        set vimeo-restrict {7 | 134} <-----Set the Vimeo restriction (7: do
not show mature content, 134: do not show unrated and mature content).
    next
end
Last Modified Date: 04-28-2021 Document ID: FD52166