The traffic-shaping policy is matching YouTube by URL category.

FortiGate can only look up the URL category of a flow when the matching firewall policy is using a Web Filter profile; otherwise the IPS engine never performs the URL category query and the shaping policy is skipped. Enabling Web Filtering on the firewall policy therefore allows the URL‐category match (YouTube/Streaming Media) and the configured bandwidth limits are applied. (Application Control is not required for URL-category shaping.)

A. Destination Internet Service affects ISDB objects; the shaping rule is based on URL category, not ISDB, so enabling this has no effect on YouTube matching.

B. Application Control is unnecessary for URL-category-based shaping; the IPS engine already identifies applications even without an Application Control profile.

D. SD-WAN zones are supported in shaping policies; selecting individual members is optional and does not influence URL-category detection.

1. Fortinet, FortiOS 7.2 Administration Guide – “Traffic shaping policies: URL category‐based shaping requires that the corresponding firewall policy include a Web Filter profile” (Section 37.3.1, p. 1032).

2. Fortinet Knowledge Base, Article KB-FD50275 “Traffic shaping with URL category—Web Filter profile requirement”, para. 2.

3. Fortinet NSE7 SD-WAN 7.0 Courseware, Module “Advanced Traffic Shaping”, slide 18: “URL category match evaluated only when Web Filtering is enabled on the firewall rule.”