| Description |
This article describes the issue where the 'Media Stream' subcategory under 'Bandwidth Consuming' is blocked, yet streaming media websites remain accessible. |
| Scope | FortiGate. |
| Solution |
To Block the streaming media by using a web filter profile, it is necessary to check the following steps.
Block the Category: Streaming Media and Download under Group: Bandwidth Consuming.
But if other categories are set to allow action, then it is still possible to access the videos and media that fall under different FortiGuard categories.
For example: www.tiktok.com is rated as a Social Networking under Group: General Interest – Personal.
However, because media streaming is being blocked, videos on TikTok should be restricted, but they will remain accessible.
To achieve this, it is necessary to switch the firewall policy's inspection mode from flow-based to proxy-based. This change allows FortiGate to examine the content of the packets and block video traffic effectively. In contrast, with flow-based inspection, only the packet headers are checked, which would still permit video traffic to pass through.
To check what category the website belongs to, check the following link: Web Filter Lookup. |
