Skip to main content
tonylin1
Staff
Staff
June 15, 2022

Technical Tip: How to allow only one channel for YouTube filter

  • June 15, 2022
  • 0 replies
  • 760 views
Description

This articles describes how to allow only one channel for YouTube filter.

Scope FortiOS 7.0.6 or later.
Solution
Below are the requirements:
 
  • Deep inspection.
  • Deep Inspection on HTTPS.
 
  1. Set up a YouTube filter.
 
config videofilter profile
    edit "Allow-Youtube"
        set youtube-channel-filter 1
    next
end
 
config videofilter youtube-channel-filter
    edit 1
        set name "Allow-Youtube"
        set default-action block
            config entries
                edit 1
                    set action allow
                    set channel-id "UCbDEamSXQhxqhovhd2NdEyg" => only allow this youtube channel 
                next
            end
        set log enable
    next
end
 
  1. Setup firewall policy.
     
    x.x.x.x is the source IP address.
     
    config firewall policy
        edit <policy id>
            set name "111 test"
            set uuid d2295b40-684e-51ec-db47-d6a39437baa3
            set srcintf "lan"
            set dstintf "wan1"
            set action accept
            set srcaddr "x.x.x.x"
            set dstaddr "all"
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "custom-deep-inspection" => deep inspection for TCP 443
            set videofilter-profile "Allow-Youtube"
            set logtraffic all
            set capture-packet enable
            set auto-asic-offload disable
            set nat enable
        next
    end
     
Related document: