Hi, I'm facing a strange webfilter behavior for example with the category Streaming and Media Download.
I set my webfilter accoring to the manual, the firewall policy and webfilter are both proxy-based.
I put a Warning on Streaming and Media Download with 5 seconds for testing purposes, works great with dailymotion.com but doesn't work for youtube.com. On Youtube I got the first Warning which I unblock, but I never get a second.
I tried to set up a Testlist in Web Rating Overrides with dailymotion.com and youtube.com, again with a Warning in my Webfilter. Same result, works great with Dailymotion but doesn't work for youtube.com.
Any help would be appreciated.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi @e-novinfo
Thank you for posting your query.
For the SSL Inspection in policy are you using certificate inspection or deep-inspection?
Try testing this with the deep inspection.
Regards
Priyanka
- Have you found a solution? Then give your helper a "Kudos" and mark the solution
In fact, I set a certificate-inspection-TEST in SSL/SSH inspection with Full SSL Inspection Method. I guess it behaves like deep inspection profile.
I also tried to set deep inspection profile in my policy as you adviced me but I got the same results : Dailymotion works fine, Youtube and Odissey don't work.
HI @e-novinfo
Thank you for posting an update.
Below are the observations from the LAB:-
++ When we set a warning action for the web filter category in this case user gets a replacement message from Fortigate to select whether they want to proceed or go back
++ In the case of youtube we will not get the replacement message as youtube handles the replacement message differently.
In place of are placement message, it shows offline internet access
++ Using the warning message we will be able to achieve the YouTube video control
++ You can achieve it by using a video filter
In 7.4.0 fortiOS there is an improvement regarding the replacement block page:-
Regards
Priyanka
- Have you found a solution? Then give your helper a "Kudos" and mark the solution
Thanks for fast reply, unfortunately we can't set a Warning with the video filter, it can only block, allow or monitor stuff and the link you provided talks about youtube channels filtering, so it's not about my problem.
The fun fact is that I also never see the youtube "offline internet access" message.
Hi @e-novinfo
In the lab, I have tested with the proxy-based policy and deep inspection.
Before testing make sure to clear the existing session or check from the incognito mode.
Regards
Priyanka
- Have you found a solution? Then give your helper a "Kudos" and mark the solution
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.