Video filtering
With the video filter profile, you can filter YouTube videos by channel ID for a more granular override of a single channel, user, or video. The video filter profile is currently supported in proxy-based policies and requires SSL deep inspection.
In 7.0.1, restricting YouTube access is configured in the web filter profile. See Restrict YouTube access in the FortiOS Administration Guide for more information. |
To configure a video filter in the GUI:
- Go to Security Profiles > Video Filter and click Create New.
- In the Channel override list section, click Create New. The New Channel Override Entry pane opens.
- Enter a Channel ID and select an Action.
- Click OK.
- Optionally, enable Restrict YouTube access and select a setting (Moderate or Strict).
- Click OK.
- In the CLI, enable the YouTube API query:
config videofilter youtube-key edit 1 set key ******** set status enable next end
- Create the firewall policy:
- Go to Policy & Objects > Firewall Policy and click Create New.
- For Inspection Mode, select Proxy-based.
- Enable Video Filter and select the profile you created.
- For SSL Inspection, select deep-inspection.
- Configure the other settings as needed and click OK.
To configure a video filter in the CLI:
- Create the channel filter:
config videofilter youtube-channel-filter edit 1 set name "channel_filter" config entries edit 1 set action block set channel-id "UCJHo4AuVomwMRzgkA5DQEOA" next end next end
- Create the video filter profile:
config videofilter profile edit "channel_filter" set youtube-channel-filter 1 set youtube-restrict strict next end
- Enable the YouTube API query:
config videofilter youtube-key edit 1 set key ******** set status enable next end
- Create the firewall policy:
config firewall policy edit 1 set name "video-filter" set srcintf "port1" set dstintf "port5" set srcaddr "all" set dstaddr "all" set action accept set schedule "always" set service "ALL" set utm-status enable set inspection-mode proxy set ssl-ssh-profile "deep-inspection" set videofilter-profile "channel_filter" set nat disable next end
Vimeo
The video filter profile includes a setting to restrict Vimeo access, which can only be configured in the CLI.
To restrict Vimeo access:
config videofilter profile edit <name> set vimeo-restrict {7 | 134} next end
vimeo-restrict {7 | 134} |
Set the Vimeo restriction:
|
In 7.0.1, this setting has moved to the web filter profile: config webfilter profile edit <name> config web set vimeo-restrict {7 | 134} end next end |