Rumble videos getting blocked

[BradL]

I have been watching Rumble on my network for years.  Suddenly, midmorning today, I could no longer watch videos on Rumble.  Most of the images on the home page are blocked.  When I try to start a video on my PC, I get no video feed just the html page. When I attempt to watch videos on my Apple devices with access through my Fortigate, I get the video for the ads, but the main video will not run. I also get a message in the video box which says, "The certificate for this server is invalid".  When I access Rumble on my Apple devices using cellular data, everything works perfectly.

There is no issue viewing YouTube, or any other sites I have tested.

There have been ZERO changes to the configuration on the Fortigate.  The bios is up to date, and last update was several weeks ago.  Rumble video was working for most of the morning, then suddenly stopped midday with the issue describe above.

Has this happened to anyone else?

[Mrinmoy]

Can you please check the firewall policy for that traffic? Are you doing any inspection? If so, disable and test again.

The following article will help you to find the firewall policy
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Firewall-policy-lookups/ta-p/192912

[BradL]

I checked the policy. It is the SSL inspection policy which is suddenly disallowing Rumble videos.

Destinations: hugh.cdn.rumble.cloud(172.98.58.200) and hugh.cdn.rumble.cloud(207.5.199.7)

Again, nothing has changed in policy, router, or bios configuration in many weeks.  The router has been up for the past 64 days.  Viewing Rumble has not been an issue for all that time, prior to midmorning today.

[hbac]

Hi @BradL,

Can you share the log details showing SSL inspection blocking the traffic? 

Regards, 

[BradL · Accepted solution]

Thank you both for your assistance with this issue.  I have identified the problem and it is now resolved.

When I went to retrieve the SSL inspection logs, I discovered the real issue was the web filter was blocking the site, because the site being accessed was listed as being "unrated".  It appears Rumble had created a new domain for streaming videos.  I contact Fortinet through the handy live rating service, and it was resolved in a few minutes.

I can only guess, but I think the certificate message was being thrown because of the redirection to the Fortigate blocked domain message page, and the app comparing that page to the certificate it has available.

Again, thank you both.  I am sorry I didn't catch this before wasting your time.

[Mrinmoy]

So traffic is working if you disable the inspection?

Also what type of inspection you are doing (certificate or deep)? Did you check the certificate status?

[BradL]

Disabling SSL inspection is not an option.  I am using Certificate Inspection (not deep).

According to the browser, the certificate is valid.  I get all the HTML for any page I access, the only thing that doesn't come through is the video.

On my Apple devices, when using cellular data, everything comes through fine (including video).  When using my Apple devices through the Fortigate, the video window shows the message "The certificate for this server is invalid" in the bottom left corner of the HTML page segment (black video frame) where the video would be contained on the page.  

The strange part is, on my Apple devices the advertisement videos will play (despite the "invalid" message being displayed while it's playing.), but the actual video will not play.