Fortinet black logo

New Features

Video filtering

Copy Link
Copy Doc ID 4f6cd3c1-22cb-11eb-96b9-00505692583a:190873
Download PDF

Video filtering

With the video filter profile, you can filter YouTube videos by channel ID for a more granular override of a single channel, user, or video. The video filter profile is currently supported in proxy-based policies and requires SSL deep inspection.

Note

In 7.0.1, restricting YouTube access is configured in the web filter profile. See Restrict YouTube access in the FortiOS Administration Guide for more information.

To configure a video filter in the GUI:
  1. Go to Security Profiles > Video Filter and click Create New.
  2. In the Channel override list section, click Create New. The New Channel Override Entry pane opens.
    1. Enter a Channel ID and select an Action.

    2. Click OK.
  3. Optionally, enable Restrict YouTube access and select a setting (Moderate or Strict).

  4. Click OK.
  5. In the CLI, enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  6. Create the firewall policy:
    1. Go to Policy & Objects > Firewall Policy and click Create New.
    2. For Inspection Mode, select Proxy-based.
    3. Enable Video Filter and select the profile you created.
    4. For SSL Inspection, select deep-inspection.

    5. Configure the other settings as needed and click OK.
To configure a video filter in the CLI:
  1. Create the channel filter:
    config videofilter youtube-channel-filter
        edit 1
            set name "channel_filter"
            config entries
                edit 1
                    set action block
                    set channel-id "UCJHo4AuVomwMRzgkA5DQEOA"
                next
            end
        next
    end
  2. Create the video filter profile:
    config videofilter profile
        edit "channel_filter"
            set youtube-channel-filter 1
            set youtube-restrict strict
        next 
    end
  3. Enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  4. Create the firewall policy:
    config firewall policy
        edit 1
            set name "video-filter"
            set srcintf "port1"
            set dstintf "port5"
            set srcaddr "all"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "deep-inspection"
            set videofilter-profile "channel_filter"
            set nat disable
        next
    end 

Vimeo

The video filter profile includes a setting to restrict Vimeo access, which can only be configured in the CLI.

To restrict Vimeo access:
config videofilter profile
    edit <name>
        set vimeo-restrict {7 | 134}
    next 
end

vimeo-restrict {7 | 134}

Set the Vimeo restriction:

  • 7: do not show mature content
  • 134: do not show unrated and mature content
Note

In 7.0.1, this setting has moved to the web filter profile:

config webfilter profile
    edit <name>
        config web
            set vimeo-restrict {7 | 134}
        end
    next 
end

Video filtering

With the video filter profile, you can filter YouTube videos by channel ID for a more granular override of a single channel, user, or video. The video filter profile is currently supported in proxy-based policies and requires SSL deep inspection.

Note

In 7.0.1, restricting YouTube access is configured in the web filter profile. See Restrict YouTube access in the FortiOS Administration Guide for more information.

To configure a video filter in the GUI:
  1. Go to Security Profiles > Video Filter and click Create New.
  2. In the Channel override list section, click Create New. The New Channel Override Entry pane opens.
    1. Enter a Channel ID and select an Action.

    2. Click OK.
  3. Optionally, enable Restrict YouTube access and select a setting (Moderate or Strict).

  4. Click OK.
  5. In the CLI, enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  6. Create the firewall policy:
    1. Go to Policy & Objects > Firewall Policy and click Create New.
    2. For Inspection Mode, select Proxy-based.
    3. Enable Video Filter and select the profile you created.
    4. For SSL Inspection, select deep-inspection.

    5. Configure the other settings as needed and click OK.
To configure a video filter in the CLI:
  1. Create the channel filter:
    config videofilter youtube-channel-filter
        edit 1
            set name "channel_filter"
            config entries
                edit 1
                    set action block
                    set channel-id "UCJHo4AuVomwMRzgkA5DQEOA"
                next
            end
        next
    end
  2. Create the video filter profile:
    config videofilter profile
        edit "channel_filter"
            set youtube-channel-filter 1
            set youtube-restrict strict
        next 
    end
  3. Enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  4. Create the firewall policy:
    config firewall policy
        edit 1
            set name "video-filter"
            set srcintf "port1"
            set dstintf "port5"
            set srcaddr "all"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "deep-inspection"
            set videofilter-profile "channel_filter"
            set nat disable
        next
    end 

Vimeo

The video filter profile includes a setting to restrict Vimeo access, which can only be configured in the CLI.

To restrict Vimeo access:
config videofilter profile
    edit <name>
        set vimeo-restrict {7 | 134}
    next 
end

vimeo-restrict {7 | 134}

Set the Vimeo restriction:

  • 7: do not show mature content
  • 134: do not show unrated and mature content
Note

In 7.0.1, this setting has moved to the web filter profile:

config webfilter profile
    edit <name>
        config web
            set vimeo-restrict {7 | 134}
        end
    next 
end