Fortigate SSL Inspection Stopping Youtube Videos From Loading

[speakercon]

Currently having an issue with our Fortigate's stopping youtube videos from loading. The page itself loads okay but the video does not load (as shown in the screenshot).

 

If I disable the SSL inspection the video loads fine, so it must be that which is causing it. I've made sure the SSL certificates are up to date, but it makes no difference. There have been no config changes recently, this has just started randomly, it started on one fortigate then started happening on the others maybe a week or so later.

 

Hoping someone else has experienced this and knows a fix!

 

Thanks

 

 

[mavhc]

Should be able to press f12 to open dev tools and see more error details

[speakercon]

Oh yes, many many errors when SSL is enabled. Mainly "Failed to load resources: the server responded with a status of 403 (Forbidden)" & "Failed to load resource: net::ERR_FAILED".

[Neil83]

Can you create a test Firewall Policy with a single PC (create an address using the IP) and apply all of your security policies (web filter, av, application etc) or clones of these rules. Then try removing the rules one by one until you can find whats stopping them from loading.

 

If you have an application or video policy against your firewall policy rule it could have been updated behind the scenes and is now causing an issue.

[PaddyNewman]

Just testing on a FortiGate, it seems OK... how are you "allowing" YouTube, just category based?

[RLR]

We also have fortigate doing full ssl inspection and it seems okay. Do you have a support contract with anyone that might be able to help? Are there any firmware or IPS updates available?

[speakercon]

Thanks everyone, I've resolved this now, it turned out that googlevideo.com was in the block list on the student filtering policy, and I overlooked it

 

It must have been added many years ago as it was near the top but only recently seems to have made a difference. The F12 error report was very useful as it showed that URL unable to load.