Configuring and applying Video Filter

The video filter feature allows you to allow, monitor, or block YouTube videos based on FortiGuard categories. It also provides the flexibility to override the actions configured for a FortiGuard category on a per-channel basis using their channel IDs.

Video filter requires enabling SSL deep inspection inside the profile group. See Certificate and deep inspection modes. It also requires a Google API key to access the YouTube Data API. To generate an API key, see YouTube Data API Overview.

The following example demonstrates configuring video filter using FortiManager. In this configuration, the video filter is set to:

• Block YouTube videos categorized as News under FortiGuard categories.
• Monitor YouTube videos for all other FortiGuard categories.
• Allow videos from YouTube channel named CNN by using its channel ID.

To display some security profiles or advanced CLI configurations, from within any Policy & Objects page such as Policy & Objects > Security Profiles or Policy & Objects > Advanced, you must click Tools > Feature Visibility and ensure the desired security features are enabled. See Feature visibility.

To create and apply a new Video Filter:

1. Create a new Video Filter:
   1. Go to Policy & Objects > Security Profiles > Video Filter and create a new video filter by clicking Create New.
   2. In the Name field, enter Custom-Video-Filter.
   3. Set Default Action for the FortiGuard categories to Monitor.
   4. Enable the toggle for FortiGuard Category Based Filter.
   5. From the Category list, select News and set it to Block.
   6. In Youtube Channel Override List, click Create New, enter the following in the slide-in, and click OK:

      Option	Value
      Channel ID	UCupvZG-5ko_...
      Comments	Allows access to YouTube videos from CNN
      Action	Monitor

      

   7. Click OK.
   8. Enter a suitable description in Change Note and click OK.

      

2. Go to Policy & Object > Security Profiles > Video Filter. Click Custom-Video-Filter, select Edit Video Filter Settings, enter the API key to access YouTube data, and click OK.

   

3. Apply Video Filter:
   1. Go to Policy & Objects > Advanced > CLI Configurations.
   2. Enter profile-group in the search bar to discover results matching that keyword.
   3. Expand the firewall result in the tree menu, and select the profile-group menu item.
   4. In firewall profile-group, edit an existing profile-group or click Create New.
   5. In the name field, enter custom-profile-group.
   6. For videofilter-profile, select Custom-Video-Filter.
   7. For profile-protocol-options, select default.
   8. For ssl-ssh-profile, select deep-inspection.
   9. Click OK.
4. Repeat steps in Configuring FortiManager for central managementto synchronize the custom-profile-group Security Profile Group from FortiManager to FortiSASE.
5. In FortiSASE, verify the configuration has been synchronized from FortiManager:
6. Go to Configuration > Security and do the following:
   1. For Profile Group, select custom-profile-group.
   2. In the Video Filter widget, click View.
   3. Observe the required configuration is synchronized to FortiSASE.

      

7. Go to Analytics > Central Management Synchronizations and do the following:
   1. Select the most recent log entry and click View log details.
   2. Confirm in the log details the desired configuration settings have been synchronized from FortiManager.