QUIC Protocol Disable methods

[AJAY2]

Hi, 

Is there a way we can disable QUIC protocol on the Guest client browsers (Captive portal via Cisco ISE) to ensure Content filtering works as expected on the MX/Firewall ?

[Brash · Accepted solution]

This post has some good information about methods to block QUIC traffic

https://community.meraki.com/t5/Security-SD-WAN/Block-QUIC-navigation-about-google-protocol/m-p/2681...

[BlakeRichardson]

This premise of QUIC is good but it creates all sorts of issues with content filtering and SSL inspection. 

[alemabrahao]

Block UDP/443 on MX for Guest VLAN. This is the simplest and most effective method.

[Inderdeep]

May be this helps, the past details 

https://community.meraki.com/t5/Security-SD-WAN/Block-QUIC-navigation-about-google-protocol/m-p/2262....

[AJAY2]

Tell me whether blocking on the Zscaler DNS will prevent the QUIC protocol issues?

[alemabrahao]

Blocking only via Zscaler DNS may reduce some QUIC‑related issues, but it will not reliably prevent QUIC. For consistent results, you need to block QUIC at the network/HTTP proxy level, not just DNS.