Fortigate Quic Youtube Restricted Mode

[MMAT]

Hello, 

We currently use Proxy based web filters and application control policies to block websites etc. We are also using it to enforce Google SafeSearch and Youtube Restricted mode. However, YouTube restricted mode doesn't appear to work unless we block QUIC in our application control policies. When Quic is blocked, safe search and restricted mode on youtube seems to work as expected, but this creates other issues where we get fortigate block pages when doing google searches etc. Is there a way around this at all?

We are running v7.4.0 on our gates.

[abarushka]

Hello,

You may consider to switch to flow inspection mode. Flow inspection supports QUIC:

https://docs.fortinet.com/document/fortigate/7.2.0/new-features/440398/inspecting-http3-traffic

HTTP/3 traffic can be inspected on the FortiGate in flow mode inspection.

[MMAT]

I had considered this as an option, however, with flow inspection mode you cannot force SafeSearch anyway. 

Cheers

[hbac]

Hi @MMAT,

QUIC needs to be blocked for Safe Search to work properly as per this article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Safe-Search-feature-in-FortiOS-and-how-to-...

What kind of block pages are you getting? 

Regards,