Skip to main content
Manuel93
New Member
July 17, 2023
Question

URL FILTER

  • July 17, 2023
  • 4 replies
  • 2228 views

I have a web filter that blocks streaming media and download on the fortiguard catergory based filter. However, I have permitted access to youtube under the url filter using both allow and exempt actions yet it doesn't work-(fortinet still blocks access to this). How can this be fixed? It appears that despite there been a hit for the static url filter the firewall still proceeds to send the traffic to the fortiguard category based filter for inspection which would obviously block the traffic

4 replies

srajeswaran
Staff
Staff
July 17, 2023

Are you using deep-inspection or certificate-inspection ? If you are using certificate inspection, it could be due to the SNI mis-match, can you try disabling ""block-invalid-hostname" option in webfilter profile" and test?

ref: https://community.fortinet.com/t5/FortiGate/HTTPS-Webfiltering-without-deep-scan-enabled-details/ta-p/197546?externalID=FD34661

sw2090
SuperUser
SuperUser
July 17, 2023

Sounds like your blocking rule is not "exempt" but "allow" or "monitor". 

Also keep in mind that url filter rules are matched top=>down like policies.

akushwaha
Staff
Staff
July 17, 2023

Hi,
As I understand you it is being blocked because it is matching allow rule in web filter, please configure only exempt option to permit YouTube traffic. Please refer to this below article regarding static URL filter:
Technical Tip: Using a static URL filter feature t... - Fortinet Community


Regards,

Abhimanyu

abarushka
Staff
Staff
July 17, 2023

Hello,

 

Allowing youtube.com URL may not be sufficient, since googlevideo.com URL is used to load videos.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!