Fortinet Document Library

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

Filtering based on YouTube channel

Video filtering can be configured to filter specific YouTube channels. The following identifiers are used for YouTube channels:

given <channel-id>, affect on:

www.youtube.com/channel/<channel-id>

www.youtube.com/user/<user-id>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

www.youtube.com/watch?v=<string>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

In a YouTube channel filter profile, the default action is set to monitor when there is no match. Logging is also disabled by default.

config videofilter youtube-channel-filter
    edit <id>
        set default-action {block | monitor | allow}
        set log {enable | disable}
    next
end

In the following example, a YouTube channel ID (UCJHo4AuVomwMRzgkA5DQEOA) is blocked, and the video filter is applied to a policy.

To configure a video filter based on a YouTube channel in the GUI:
  1. Go to Security Profiles > Video Filter and click Create New.
  2. In the Channel override list section, click Create New. The New Channel Override Entry pane opens.
    1. Enter the Channel ID (UCJHo4AuVomwMRzgkA5DQEOA) and for Action, select Block.

    2. Click OK.
  3. Click OK.
  4. Create the firewall policy:
    1. Go to Policy & Objects > Firewall Policy and click Create New.
    2. For Inspection Mode, select Proxy-based.
    3. Enable Video Filter and select the profile you created.
    4. For SSL Inspection, select deep-inspection.

    5. Configure the other settings as needed and click OK.
To configure a video filter based on a YouTube channel in the CLI:
  1. Create the channel filter:
    config videofilter youtube-channel-filter
        edit 1
            set name "channel_filter"
            set default-action monitor
            set log enable
            config entries
                edit 1
                    set action block
                    set channel-id "UCJHo4AuVomwMRzgkA5DQEOA"
                next
            end
        next
    end
  2. Create the video filter profile:
    config videofilter profile
        edit "channel_filter"
            set youtube-channel-filter 1
        next 
    end
  3. Create the firewall policy:
    config firewall policy
        edit 1
            set name "video-filter"
            set srcintf "port2"
            set dstintf "port1"
            set srcaddr "all"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "deep-inspection"
            set videofilter-profile "channel_filter"
            set nat disable
        next
    end 

Filtering based on YouTube channel

Video filtering can be configured to filter specific YouTube channels. The following identifiers are used for YouTube channels:

given <channel-id>, affect on:

www.youtube.com/channel/<channel-id>

www.youtube.com/user/<user-id>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

www.youtube.com/watch?v=<string>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

In a YouTube channel filter profile, the default action is set to monitor when there is no match. Logging is also disabled by default.

config videofilter youtube-channel-filter
    edit <id>
        set default-action {block | monitor | allow}
        set log {enable | disable}
    next
end

In the following example, a YouTube channel ID (UCJHo4AuVomwMRzgkA5DQEOA) is blocked, and the video filter is applied to a policy.

To configure a video filter based on a YouTube channel in the GUI:
  1. Go to Security Profiles > Video Filter and click Create New.
  2. In the Channel override list section, click Create New. The New Channel Override Entry pane opens.
    1. Enter the Channel ID (UCJHo4AuVomwMRzgkA5DQEOA) and for Action, select Block.

    2. Click OK.
  3. Click OK.
  4. Create the firewall policy:
    1. Go to Policy & Objects > Firewall Policy and click Create New.
    2. For Inspection Mode, select Proxy-based.
    3. Enable Video Filter and select the profile you created.
    4. For SSL Inspection, select deep-inspection.

    5. Configure the other settings as needed and click OK.
To configure a video filter based on a YouTube channel in the CLI:
  1. Create the channel filter:
    config videofilter youtube-channel-filter
        edit 1
            set name "channel_filter"
            set default-action monitor
            set log enable
            config entries
                edit 1
                    set action block
                    set channel-id "UCJHo4AuVomwMRzgkA5DQEOA"
                next
            end
        next
    end
  2. Create the video filter profile:
    config videofilter profile
        edit "channel_filter"
            set youtube-channel-filter 1
        next 
    end
  3. Create the firewall policy:
    config firewall policy
        edit 1
            set name "video-filter"
            set srcintf "port2"
            set dstintf "port1"
            set srcaddr "all"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "deep-inspection"
            set videofilter-profile "channel_filter"
            set nat disable
        next
    end