Fortinet Document Library

Version:

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

Video filter

With the video filter profile, you can filter YouTube videos by channel ID for a more granular override of a single channel, user, or video. The video filter profile is currently supported in proxy-based policies and requires SSL deep inspection.

The following identifiers are used for YouTube channels:

given <channel-id>, affect on:

www.youtube.com/channel/<channel-id>

www.youtube.com/user/<user-id>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

www.youtube.com/watch?v=<string>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

Tooltip

There is an option in the video filter profile to restrict YouTube access (moderate or strict). Formerly, YouTube for Schools was a way to access educational videos inside a school network. This YouTube feature let schools access educational videos on YouTube EDU and specify the videos accessible within the school network.

When Google stopped supporting YouTube for Schools on July 1, 2016, YouTube safe search also stopped working.

Google provides information on restricting YouTube content, see Restrict YouTube content available to G Suite users. At this time, Google offers options to restrict inappropriate content for DNS, HTTP headers, and Chromebooks.

To configure a video filter in the GUI:
  1. Go to Security Profiles > Video Filter and click Create New.
  2.  In the Channel override list section, click Create New. The New Channel Override Entry pane opens.
    1. Enter a Channel ID and select an Action.

    2. Click OK.
  3. Optionally, enable Restrict YouTube access and select a setting (Moderate or Strict).

  4. Click OK.
  5. In the CLI, enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  6. Create the firewall policy:
    1. Go to Policy & Objects > Firewall Policy and click Create New.
    2. For Inspection Mode, select Proxy-based.
    3. Enable Video Filter and select the profile you created.
    4. For SSL Inspection, select deep-inspection.

    5. Configure the other settings as needed and click OK.
To configure a video filter in the CLI:
  1. Create the channel filter:
    config videofilter youtube-channel-filter
        edit 1
            set name "channel_filter"
            config entries
                edit 1
                    set action block
                    set channel-id "UCJHo4AuVomwMRzgkA5DQEOA"
                next
            end
        next
    end
  2. Create the video filter profile:
    config videofilter profile
        edit "channel_filter"
            set youtube-channel-filter 1
            set youtube-restrict strict
        next 
    end
  3. Enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  4. Create the firewall policy:
    config firewall policy
        edit 1
            set name "video-filter"
            set srcintf "port1"
            set dstintf "port5"
            set srcaddr "all"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "deep-inspection"
            set videofilter-profile "channel_filter"
            set nat enable
        next
    end 

Vimeo access

The video filter profile includes a setting to restrict Vimeo access, which can only be configured in the CLI.

To restrict Vimeo access:
config videofilter profile
    edit <name>
        set vimeo-restrict {7 | 134}
    next 
end

vimeo-restrict {7 | 134}

Set the Vimeo restriction:

  • 7: do not show mature content
  • 134: do not show unrated and mature content

Video filter

With the video filter profile, you can filter YouTube videos by channel ID for a more granular override of a single channel, user, or video. The video filter profile is currently supported in proxy-based policies and requires SSL deep inspection.

The following identifiers are used for YouTube channels:

given <channel-id>, affect on:

www.youtube.com/channel/<channel-id>

www.youtube.com/user/<user-id>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

www.youtube.com/watch?v=<string>

matches channel-id from <meta itemprop="channelId" content="<channel-id>">

Tooltip

There is an option in the video filter profile to restrict YouTube access (moderate or strict). Formerly, YouTube for Schools was a way to access educational videos inside a school network. This YouTube feature let schools access educational videos on YouTube EDU and specify the videos accessible within the school network.

When Google stopped supporting YouTube for Schools on July 1, 2016, YouTube safe search also stopped working.

Google provides information on restricting YouTube content, see Restrict YouTube content available to G Suite users. At this time, Google offers options to restrict inappropriate content for DNS, HTTP headers, and Chromebooks.

To configure a video filter in the GUI:
  1. Go to Security Profiles > Video Filter and click Create New.
  2.  In the Channel override list section, click Create New. The New Channel Override Entry pane opens.
    1. Enter a Channel ID and select an Action.

    2. Click OK.
  3. Optionally, enable Restrict YouTube access and select a setting (Moderate or Strict).

  4. Click OK.
  5. In the CLI, enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  6. Create the firewall policy:
    1. Go to Policy & Objects > Firewall Policy and click Create New.
    2. For Inspection Mode, select Proxy-based.
    3. Enable Video Filter and select the profile you created.
    4. For SSL Inspection, select deep-inspection.

    5. Configure the other settings as needed and click OK.
To configure a video filter in the CLI:
  1. Create the channel filter:
    config videofilter youtube-channel-filter
        edit 1
            set name "channel_filter"
            config entries
                edit 1
                    set action block
                    set channel-id "UCJHo4AuVomwMRzgkA5DQEOA"
                next
            end
        next
    end
  2. Create the video filter profile:
    config videofilter profile
        edit "channel_filter"
            set youtube-channel-filter 1
            set youtube-restrict strict
        next 
    end
  3. Enable the YouTube API query:
    config videofilter youtube-key
        edit 1
            set key ********
            set status enable
        next
    end
  4. Create the firewall policy:
    config firewall policy
        edit 1
            set name "video-filter"
            set srcintf "port1"
            set dstintf "port5"
            set srcaddr "all"
            set dstaddr "all"
            set action accept
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "deep-inspection"
            set videofilter-profile "channel_filter"
            set nat enable
        next
    end 

Vimeo access

The video filter profile includes a setting to restrict Vimeo access, which can only be configured in the CLI.

To restrict Vimeo access:
config videofilter profile
    edit <name>
        set vimeo-restrict {7 | 134}
    next 
end

vimeo-restrict {7 | 134}

Set the Vimeo restriction:

  • 7: do not show mature content
  • 134: do not show unrated and mature content