Customer Service
Customer Service Information and Announcements
tonylin1
Staff
Staff
Article Id 214744
Description

This articles describes how to allow only one channel for YouTube filter.

Scope FortiOS 7.0.6 or later.
Solution
Below are the requirements:
 
  • Deep inspection.
  • Deep Inspection on HTTPS.
 
  1. Set up a YouTube filter.
 
config videofilter profile
    edit "Allow-Youtube"
        set youtube-channel-filter 1
    next
end
 
config videofilter youtube-channel-filter
    edit 1
        set name "Allow-Youtube"
        set default-action block
            config entries
                edit 1
                    set action allow
                    set channel-id "UCbDEamSXQhxqhovhd2NdEyg" => only allow this youtube channel 
                next
            end
        set log enable
    next
end
 
  1. Setup firewall policy.
     
    x.x.x.x is the source IP address.
     
    config firewall policy
        edit <policy id>
            set name "111 test"
            set uuid d2295b40-684e-51ec-db47-d6a39437baa3
            set srcintf "lan"
            set dstintf "wan1"
            set action accept
            set srcaddr "x.x.x.x"
            set dstaddr "all"
            set schedule "always"
            set service "ALL"
            set utm-status enable
            set inspection-mode proxy
            set ssl-ssh-profile "custom-deep-inspection" => deep inspection for TCP 443
            set videofilter-profile "Allow-Youtube"
            set logtraffic all
            set capture-packet enable
            set auto-asic-offload disable
            set nat enable
        next
    end
     
Related document: