- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Re: Is Quic (UDP/443) supported for HTTPS inspecti...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is Quic (UDP/443) supported for HTTPS inspection
We are running R81.20. I have scanned the release notes and can't see if the QUIC protocol (UDP/443) is now supported for HTTPS Inspection.
Is HTTPS Inspection of QUIC (UDP/443) supported in R81.20?
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
With the upcoming release of R82 it will be supported.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
With the upcoming release of R82 it will be supported.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
For fun, I asked AI Copilot this question.
As Chris stated earlier, it is planned for R82.
HTTPS Inspection of QUIC (UDP/443) is not supported in R81.20. QUIC is a protocol that runs over UDP and is used by Google Chrome and other applications to improve performance. Since QUIC traffic is not treated as HTTPS, it bypasses HTTPS Inspection rules.
To handle QUIC traffic, you can take the following steps:
-
Disable QUIC in Google Chrome:
- Open Chrome and type
chrome://flags
in the address bar. - Search for "Experimental QUIC protocol".
- Set it to "Disabled".
- Click "Relaunch Now" to restart Chrome.
- Open Chrome and type
-
Block QUIC on the Firewall or Application Control Policy:
- Firewall Policy:
- Create a new UDP service on port 443.
- Set a firewall rule to block this traffic.
- Note: This will block all UDP traffic on port 443, not just QUIC.
- Application Control Policy:
- Set a rule to block the "QUIC Protocol".
- Firewall Policy:
For more detailed information, you can refer to the following SecureKnowledge articles:
- sk111754: HTTPS traffic to Google services (over QUIC) from Chrome cannot be inspected by HTTPS inspection rules
- sk108202: Best Practices - HTTPS Inspection
If you need the most current information or further assistance, please refer to the official Check Point documentation or contact Check Point support.