Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
AEK
SuperUser
SuperUser

Deep inspection with streaming media

Hi FortiGate admins

When enabling deep inspection for streaming media sites (like youtube), will it deep-inspect video stream as well? I mean inspecting gigabytes of videos (mp4 and so) is probably useless and it consumes much CPU for nothing.

AEK
AEK
4 REPLIES 4
DPadula
Staff
Staff

Hi AEK,

 

No, to "inspect" video you need to enable video filter. 

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/190873/video-filtering

 

The video filter will NOT inspect the contend of the video, it will block or allow a channel on youtube according to its ID.

 

So a video won't be allow or deny according to its contend basically, but to its change-id. 

 

AEK

Thanks @DPadula , it's reassuring, because in some other NGFW of other constructor I've seen deep inspection decrypting, inspecting and re-encrypting tons of Youtube videos, causing huge CPU overhead for nothing.

AEK
AEK
DPadula

Hi AEK,
Could you please tell me the vendor so I can have a look on this feature?

Thanks

AEK

Hi @DPadula 

I prefer not to mention the vendor in such case, but my colleague is a specialist of this vendor and found one customer suffering from high CPU usage on his firewall or proxy (I don't remember this detail). As per my colleague, after investigation found that the deep inspection was decrypting videos, so causing too much CPU overhead.

Note that this was few years ago (old product and old firmware).

AEK
AEK
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors