Home / server / Questions / 88666
Accepted
Daniel Huckstep
Asked: 2009-11-27 14:19:35 +0800 CST

Can't stream media on network

  • 772

Long story short, at our office network, we can't really certain things. Last.fm downloads an entire song before playing it, and YouTube loads and then all of a sudden the entire video is loaded and it plays. It won't play before hand.

iTunes radio streams fine.

Is there a router setting or something else in our network hardware that would affect this? I'm currently on a Linksys Wireless-N router (the standard black spaceship looking thing) and we have some other stuff in the server room (not exactly sure what), but if there is a setting I can look for I can go in and poke around.

EDIT: The firewall appliance we have is a Fortigate of sorts, I believe a something in the 60 series.

It's a FortiGate 60M.

Talking to some other folks here, we know it's the Fortigate that's causing the problem.

EDIT: Turning off AV fixed the problem (it was expired anyway).

streaming

1 Answers

  1. Best Answer

    What you're seeing it the device wanting to scan any file that is less than the threshold you've set. I think by default on the 60 models is 10 megs.

    Edit: Now that the office is cleared out for the day I was able to try a few things out. I've found that lowering the threshold on the size of the file that AV is scanning in the protection profile that's applied to web surfing from the office to 2MB on HTTP traffic fixed all the streaming issues I ran into with youTube and last.fm.

    Edit: Below is my original answer which now that I've had a chance to try didn't work. But I'll leave it here in case this may solve a related problem for someone.

    If you trust the content coming from these sites you can add them to separate firewall rule with the protection profile of unfiltered to essentially white list these domains from being scanned. With something like this in your config.

    config firewall policy  
    edit 41  
        set srcintf "wan2"  
        set dstintf "internal1"  
            set srcaddr "Last FM"             
            set dstaddr "ANY"             
        set action accept
        set status disable
        set schedule "always"
            set service "ANY"             
        set profile-status enable
        set profile "unfiltered"
        set nat enable
    next
end
config firewall address
    edit "Last FM"
        set type fqdn
        set fqdn "*.last.fm"
    next
end

    Just make sure that this firewall rule is before your rules that are more protective policies. Also make sure you are willing to accept the risks associated with this configuration.

    • 2