Is Quic (UDP/443) supported for HTTPS inspection

[ascoyne]

We are running R81.20.  I have scanned the release notes and can't see if the QUIC protocol (UDP/443) is now supported for HTTPS Inspection.

Is HTTPS Inspection of QUIC (UDP/443) supported in R81.20?

[Chris_Atkinson · Accepted solution]

With the upcoming release of R82 it will be supported.

[PhoneBoy]

For fun, I asked AI Copilot this question.
As Chris stated earlier, it is planned for R82.

HTTPS Inspection of QUIC (UDP/443) is not supported in R81.20. QUIC is a protocol that runs over UDP and is used by Google Chrome and other applications to improve performance. Since QUIC traffic is not treated as HTTPS, it bypasses HTTPS Inspection rules.

To handle QUIC traffic, you can take the following steps:

1. Disable QUIC in Google Chrome:

   • Open Chrome and typechrome://flagsin the address bar.
   • Search for "Experimental QUIC protocol".
   • Set it to "Disabled".
   • Click "Relaunch Now" to restart Chrome.

2. Block QUIC on the Firewall or Application Control Policy:

   • Firewall Policy:
     • Create a new UDP service on port 443.
     • Set a firewall rule to block this traffic.
     • Note: This will block all UDP traffic on port 443, not just QUIC.
   • Application Control Policy:
     • Set a rule to block the "QUIC Protocol".

For more detailed information, you can refer to the following SecureKnowledge articles:

• sk111754: HTTPS traffic to Google services (over QUIC) from Chrome cannot be inspected by HTTPS inspection rules
• sk108202: Best Practices - HTTPS Inspection

If you need the most current information or further assistance, please refer to the official Check Point documentation or contact Check Point support.