Scanning QUIC

Follow

Petrushka

• January 19, 2023 20:17

Hello, 

Does Firewalla scan QUIC traffic? If not, are there plans to add this in future and what are some workarounds that can be implemented before this happens?

Thank you!

-1

• 

  Firewalla

  • January 19, 2023 21:03

  Decode QUIC? or capture the flow? If it is capturing the flow, we already doing that. 

  1

  Comment actions Permalink
• 

  Petrushka

  • January 19, 2023 21:18

  I mean doing the same security scan/analysis firewalla does on H2 (TCP) packets.  Does it also do this with H3 UDP packets? 

  0

  Comment actions Permalink
• 

  Petrushka

  • January 25, 2023 16:28

  ?

  -1

  Comment actions Permalink
• 

  Firewalla

  • January 25, 2023 19:34

  Firewalla will treat QUIC the same as rest of the protocol stack. Is there anything in particular you want to see with Quic? like it is QUIC flow? 

  1

  Comment actions Permalink
• 

  Petrushka

  • January 25, 2023 23:15

  I was just reading that many firewalls do not have the capability to scan QUIC traffic so the recommendation is to block UDP packets on ports 443 and 80 in the firewall.  It sounds like a Firewalla firewall appliances will scan this traffic like any other TCP traffic, is that correct?

  0

  Comment actions Permalink
• 

  Firewalla

  • January 25, 2023 23:38

  It depends on what they mean by "Scan QUIC", if it is MAN in the MIDDLE (decrypt and then encrypt), likely. If it is just look at TCP/UDP/IP headers, then it should be fairly easy, there is no difference between looking at HTTPS and QUIC ... 

  1

  Comment actions Permalink

Please sign in to leave a comment.