Technical Tip: How to allow only one YouTube video

[Wallerson]

Description	This article describes how to allow only one YouTube video while keeping the rest blocked.
Scope	FortiGate.
Solution	Add the following URLs along with the video URL to the Web Rating Overrides and choose a custom category. For this example, 'custom1' category will be used:  googlevideo.com www.youtube.com/s/desktop www.youtube.com/s/player www.youtube.com/api/jnn/v1 www.youtube.com/s/_/ytmainappweb www.youtube.com/watch?v=LN2glwJ6vyA <----- YouTube video URL. Change the 'custom1' category action to 'Allow'  in the WebFilter profile. The profile must be changed to 'Proxy' mode. The category 'Streaming Media and Download', where YouTube is categorized, is in 'Block'. Create an Application Control profile under Security Profile -> Application Control and make sure the 'QUIC' protocol is blocked under Application and Filter Overrides as shown below. In this example, the category 'Video/Auto' gets put in 'Monitor'.  For more information on how to block the QUIC protocol, refer to this KB article: Technical Tip: How to block/disable QUIC Add the profiles to the Firewall Policy. The Firewall Policy must be in 'Proxy' mode and 'deep-inspection' is required. The allowed video will play, but any other video selected is blocked. Note: After completing the steps above, if some part of the YouTube video is still not accessible or not working like the selected YouTube video cannot be seen full screen, check the web browser’s debug tool (developer tool) and allow the blocked URLs as described in step 1.  For Example: To see the selected YouTube video from any point, add this URL: www.youtube.com/api/jnn/v1 To see the selected YouTube video in full scree,n add this URL: www.youtube.com/s/_/ytmainappweb