Hi FortiGate admins
When enabling deep inspection for streaming media sites (like youtube), will it deep-inspect video stream as well? I mean inspecting gigabytes of videos (mp4 and so) is probably useless and it consumes much CPU for nothing.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi AEK,
No, to "inspect" video you need to enable video filter.
https://docs.fortinet.com/document/fortigate/7.0.0/new-features/190873/video-filtering
The video filter will NOT inspect the contend of the video, it will block or allow a channel on youtube according to its ID.
So a video won't be allow or deny according to its contend basically, but to its change-id.
Thanks @DPadula , it's reassuring, because in some other NGFW of other constructor I've seen deep inspection decrypting, inspecting and re-encrypting tons of Youtube videos, causing huge CPU overhead for nothing.
Hi AEK,
Could you please tell me the vendor so I can have a look on this feature?
Thanks
Hi @DPadula
I prefer not to mention the vendor in such case, but my colleague is a specialist of this vendor and found one customer suffering from high CPU usage on his firewall or proxy (I don't remember this detail). As per my colleague, after investigation found that the deep inspection was decrypting videos, so causing too much CPU overhead.
Note that this was few years ago (old product and old firmware).
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1698 | |
1092 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.