Deep inspection with streaming media

[AEK]

Hi FortiGate admins

When enabling deep inspection for streaming media sites (like youtube), will it deep-inspect video stream as well? I mean inspecting gigabytes of videos (mp4 and so) is probably useless and it consumes much CPU for nothing.

[DPadula]

Hi AEK,

No, to "inspect" video you need to enable video filter. 

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/190873/video-filtering

The video filter will NOT inspect the contend of the video, it will block or allow a channel on youtube according to its ID.

So a video won't be allow or deny according to its contend basically, but to its change-id. 

[AEK]

Thanks @DPadula , it's reassuring, because in some other NGFW of other constructor I've seen deep inspection decrypting, inspecting and re-encrypting tons of Youtube videos, causing huge CPU overhead for nothing.

[DPadula]

Hi AEK,
Could you please tell me the vendor so I can have a look on this feature?

Thanks

[AEK]

Hi @DPadula 

I prefer not to mention the vendor in such case, but my colleague is a specialist of this vendor and found one customer suffering from high CPU usage on his firewall or proxy (I don't remember this detail). As per my colleague, after investigation found that the deep inspection was decrypting videos, so causing too much CPU overhead.

Note that this was few years ago (old product and old firmware).