Technical Tip: Video Filter default behavior from v7.0.6 to v7.2.4 and v7.2.5 onwards

[Lovepreet_Dhillon]

Description	This article describes the changes in default behavior for video filter actions between v7.0.6, v7.2.4 and v7.2.5 onwards.
Scope	FortiGate v7.0.6, v7.2.4 abd v7.2.5 onwards.
Solution	On v7.0.6 and v7.2.4: A YouTube video will be blocked if action is set to block in either the FortiGuard category or YouTube-channel filter. The following features are recommended under the YouTube-channel-filter config to prioritize an action under the Youtube Channel filter over the FortiGuard category's action. YouTube API key. Set override-category enable. Use case scenario : YouTube-channel-filter for specific channels with Action allow. FortiGuard category with action block for the rest of the videos of that category. config videofilter youtube-key     edit 1         set key <enter the key here>     next end config videofilter youtube-channel-filter     edit 1         set name "Bypass channel"   <- Video filter profile name.         set default-action block              config entries                 edit 1                     set action allow                     set channel-id "channel ID"                 next             end         set override-category enable         set log enable        next end From v7.2.5 and v7.4.0 onwards : From v7.2.5 and v7.4.0 onwards video filtering is done in a multi-tiered approach and if a YouTube channel filter is configured it will be prioritized over the category filter. If a video matches a YouTube channel ID configured under the YouTube channel filter, it will be blocked or allowed depending upon the action configured under the YouTube channel filter. Suppose a video does not match the YouTube channel ID configured under the YouTube channel filter. In that case, FortiGate will check the category filter to find a match and block/allow/monitor the traffic as per the action set under that category. If no category matches or the FortiGuard category option is disabled, the default action in the video filter profile will be applicable. To find the video channel category, play the video, pause the video, 'Right-click' on the right side of the video, and choose 'view page source'. Search by keyword 'category', and select the next result until finding the category.     Additional notes: The option default-action is moved from config video filter youtube-channel-filter to config videofilter profile. The option override-category is being removed from the config on v7.2.5 onwards. config videofilter youtube-channel-filter     edit 1         set name "test"         set default-action  <- Removed already and moved to config videofilter profile.         set override-category enable/disable <- Removed.     next end Note: Starting from v7.4.4, FortiGates with 2 GB of RAM or less will no longer support proxy-related features. Video Filter is a proxy-related feature. For more information, refer to: Proxy-related features not supported on FortiGate 2 GB RAM models | FortiGate / FortiOS 7.6.0 | Fort.... Related articles: Technical Tip: How to restrict YouTube channels using video filtering. Technical Tip: Enabling video filter on FortiGate-VM