Troubleshooting Tip: Video Filter Debugging Commands

1. Double-check the Technical Tip: Blocking internet traffic but allowing access to specific YouTube Channel through Video Filter.
2. Ensure that traffic matched the expected firewall policy.

diagnose sys session filter cl
diagnose sys session filter src <IP address>
diagnose sys session list | grep policy_id

3. Make sure that the API key is configured correctly.
   
   

show full | grep -f <API key>

4. Double-check the channel ID as well.
   
   

show full | grep -f <channel_ID>

5. Clear the browser cache and reload the video. 
6. Confirm block/allow YouTube videos/channels using web filter event logs (FortiGate GUI -> Log & Report -> Security Events -> Web Filter Events). The following images represent an allowed and blocked video web filter log, respectively:

 

 

     7. Additional debug commands can be collected using the following FortiGate CLI commands:

Before starting, make sure that the WAD filter is not configured with other parameters: 

diagnose wad filter list 

drop unknown sessions: disabled 

diagnose debug console timestamp enable  

diagnose wad filter src x.x.x.x               <----- Source IP of the client.

diagnose wad debug enable level verbose

diagnose wad debug enable category video

diagnose wad filter list 

diagnose wad debug show 

diagnose debug enable

Stop the debugging after generating traffic to YouTube:

diagnose debug disable 

diagnose debug reset