Technical Tip: How to allow only one YouTube video

[Wallerson]

Description	This article describes how to allow only one YouTube video while keeping the rest blocked.
Scope	FortiGate v7.0.
Solution	Add the following URLs along with the video URL to the Web Rating Overrides and choose a custom category. For this example, 'custom1' category will be used:  googlevideo.com www.youtube.com/s/desktop www.youtube.com/s/player www.youtube.com/api/jnn/v1 www.youtube.com/s/_/ytmainappweb www.youtube.com/watch?v=LN2glwJ6vyA <----- YouTube video URL. Change the 'custom1' category action to 'Allow'  in the WebFilter profile. The profile must be changed to 'Proxy' mode. The category 'Streaming Media and Download' where YouTube is categorized gets in 'Block'. Create an Application Control profile and make sure the 'QUIC' protocol is blocked. For this example, the category 'Video/Auto' gets put in 'Monitor'. To block this category, add the 'YouTube' application to the 'Application and Filter Overrides' with either the action 'Monitor' or 'Allow'. Add the profiles to the policy. The policy must be in 'Proxy' mode and 'deep-inspection' is required. The allowed video will play, but any other video selected is blocked. Note: After completing the steps above, if some part of the YouTube video is still not accessible or not working like the selected YouTube video cannot be seen full screen, check the web browser’s debug tool (developer tool) and allow the blocked URLs as described in step 1.  For Example, To see the selected YouTube video from any point add this URL: www.youtube.com/api/jnn/v1 To see selected YouTube video in full screen add this URL: www.youtube.com/s/_/ytmainappweb