FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
gakshay
Staff
Staff
Article Id 192690
Description
This article explains how to allow Youtube video streaming but block Youtube downloads.

Solution
In firmware version 5.6 and above, the application control signature was implemented to block the videos from YouTube Downloader.
The users were able to only view the videos in YouTube but were getting blocked to download the videos when the default signature of the YouTube Downloader was applied in the application control profile.
But in many cases, the users install any third-party application download the videos from YouTube successfully.

To prevent this, create an application control profile with the default signature of the YouTube Downloader applied.

Also, create static url entry for blocking the third-party application.

In the below example, the users have downloaded the Internet Download Manager to download the YouTube Videos.

Here, when a user tries to download the video from Internet Download Manager the YouTube URL link is referring to Internet Download Manager server www.sn-ci5gup/abcd
Therefore, create a static URL entry for the above server address.

After performing the above steps, apply the security profiles to the ipv4 policy along with SSH/SSL deep inspection enabled.

Also install certificate in the web browser.
Follow the below mentioned steps to Allow Youtube Video Streaming but block Youtube Downloads(all third party applications):











Contributors