Which statement about video filtering on FortiGate is true?

Video filtering on a FortiGate requires the firewall to buffer and inspect traffic to identify and categorize video content. This level of inspection is only possible in proxy-based inspection mode. Flow-based inspection, which processes packets as they arrive without significant buffering, does not support the advanced content analysis needed for video filtering. Therefore, to use the video filtering security profile, the corresponding firewall policy must be set to proxy-based inspection mode.

A. Full SSL Inspection is not required.

This is incorrect because to inspect encrypted video traffic (like YouTube), at least certificate inspection is required. For more granular control, such as by channel ID, full (deep) SSL inspection is mandatory.

C. It inspects video files hosted on file sharing services.

This is incorrect. The FortiGuard video filtering service is designed specifically for major streaming platforms like YouTube, Vimeo, and Dailymotion, not for generic video files on file-sharing sites.

D. Video filtering FortiGuard categories are based on web filter FortiGuard categories.

This is incorrect. Video filtering and web filtering use separate and distinct sets of categories provided by FortiGuard. Video categories are specific to video content (e.g., "Comedy," "Education"), not web page types.

1. Fortinet FortiOS 7.4.0 Administration Guide

Security Profiles > Video Filter

Page 1388.

"Video filtering is only available in proxy-based firewall policies." This directly supports the correct answer (B).

"To filter HTTPS traffic

you must also apply a certificate inspection or deep inspection SSL/SSH inspection profile to the policy." This refutes option A

as some form of SSL inspection is always required for HTTPS video.

2. Fortinet FortiOS 7.4.0 Administration Guide

Security Profiles > Video Filter > FortiGuard categories

Page 1389.

This section lists the specific categories for video filtering

such as "Arts & Culture

" "Cars & Vehicles

" and "Comedy." A comparison with the Web Filter categories in the same guide (page 1298) shows they are distinct

refuting option D.

3. Fortinet FortiOS 7.4.0 Administration Guide

Security Profiles > Video Filter > Configuration

Page 1388.

The guide specifies the supported platforms: "FortiGate can use FortiGuard Video Filtering Service to filter videos from YouTube

Vimeo

and Dailymotion." This confirms that the feature is not for general file-sharing services

refuting option C.