Re:QUIC and HTTP/3 Support Now in Firefox Nightly and Beta
by jlokier on Friday April 16, 2021 @11:15PM
(#26841328)
If you're already encountering blocks, I don't think you can assume there won't be blocks on QUIC unfortunately. Here are just a selection of vendors advice. There's plenty of them, and they are probably used by some schools, libraries etc.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?...
> Our recommendations:
> Palo Alto Networks recommends creating a security policy in the firewall to block the QUIC application.
https://community.spiceworks.com/topic/2146987-do-you-block-...
> Do You Block QUIC
> Thinking about it, ... > Yes, ... > Yes, ... > Yes, ... > No, ...
https://www.fastvue.co/fastvue/blog/googles-quic-protocols-s...
> How Google’s QUIC Protocol Impacts Network Security and Reporting
> ... inadvertently created a security hole for many organizations.
> ... At the time of writing, the advice from most firewall vendors is to block QUIC until support is officially added to their products.
https://help.zscaler.com/zia/managing-quic-protocol
> Managing the QUIC Protocol
> Zscaler best practice is to block QUIC
https://www3.trustwave.com/support/kb/print20269.aspx
> Blocking web traffic over QUIC
> The recommended fix is to block outbound UDP on ports 80 and 443 ...