QUIC Protocol Disable methods

[Ajay-Chandrasekaran]

Hi,

Is there a way we can disable QUIC protocol on the Guest client browsers (Captive portal via Cisco ISE) to ensure Content filtering works as expected on the MX/Firewall ?

[Brash · Accepted solution]

This post has some good information about methods to block QUIC traffic

https://community.meraki.com/t5/Security-SD-WAN/Block-QUIC-navigation-about-google-protocol/m-p/268187/highlight/true#M59081

[BlakeRichardson]

This premise of QUIC is good but it creates all sorts of issues with content filtering and SSL inspection.

[aleabrahao]

Block UDP/443 on MX for Guest VLAN. This is the simplest and most effective method.

[inderdeepsingh1]

May be this helps, the past details

https://community.meraki.com/t5/Security-SD-WAN/Block-QUIC-navigation-about-google-protocol/m-p/226243#:~:text=Welcome%20to%20Meraki%20Community!,to%20circumvent%20Content%20Filtering%20rules.

[Ajay-Chandrasekaran]

Tell me whether blocking on the Zscaler DNS will prevent the QUIC protocol issues?

[aleabrahao]

Blocking only via Zscaler DNS may reduce some QUIC‑related issues, but it will not reliably prevent QUIC. For consistent results, you need to block QUIC at the network/HTTP proxy level, not just DNS.