Skip to main content

Prevent QUIC for On-Premise Appliance web filtering

Updated

Quick UDP Internet Connection (QUIC) speeds up connections and reduces bandwidth congestion in Chrome browsers. Because QUIC works over User Datagram Protocol (UDP) rather than Transmission Control Protocol (TCP), using QUIC can prevent On-Premise Appliance filtering.

To ensure access to undesirable websites and content is blocked, you must block QUIC traffic:

  1. Block outbound traffic, so the request falls back to TCP and is redirected to the proxy.
    • If Smoothwall is your firewall, ensure you have a Firewall Rule for UDP ports 80 and 443, with Drop as the Action.
    • If Smoothwall is not your firewall, block outbound UDP traffic on ports 80 and 443.
  2. Ensure you have a HTTPS Inspection Policy to Decrypt and Inspect everything.
  3. Add a Content Modification Policy for Remove QUIC header, with Apply as the Action.