New Block QUIC setting not showing

I have seen it in Central for a while, it looks like this in the Threat Protection policy.  Hard to believe you have overlooked it.  Not sure why you wouldn't have it unless it is behind some sort of flag that hasn't been enabled?  Sorry. 

Nope, it's just not there for me. Weird... Edit: even switching back to the legacy UI didn't sort it either.

If you open the dev tools of the browser, F12, switch to the console and type:

sc.getFlags();

This should return the flags enabled for your account, I see:

cesg.windows.computer.quic.enabled
true

cesg.windows.server.quic.enabled
true

Do you have those flags listed, if so, what is the value? I assume everything listed is true, so you may not have them?

The flag isn't even listed - there's nothing with `cesg.windows` at the start - just goes straight from `cesg.whitelist` to `cesg.winep`.

All I can suggest is you try running:

sc.setFlag('cesg.windows.computer.quic.enabled')

It might work, i.e. enable it for the endpoint policy.

For the server policies if it works:

sc.setFlag('cesg.windows.server.quic.enabled')

otherwise, you may have to open a ticket with Support.  

I don't know if you need to logout and back in or just re-open the policy.  That is all I have I'm afraid. Hope it works.

I see the policy comes down to the DWORD quic_protocol_blocking_enabled under:

HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Management\Policy\NetworkPerimeter\[latestrevision]\

1 being enabled, 0 being disabled in policy.

Not seeing it on our portal either.....This an additional cost?

That did the trick.

Just had to run the command and refresh the page.

Though strangely the toggle defaulted to being enabled on the base policy when I opened it (despite the documentation saying it's disabled by default), but not on the separate policy we have to filter websites for children's laptops at home.

Hi Slappy, 

I was able to find the support case you opened and used the developer tools as Sophos User930 suggested above to enable this policy option. This does not require an additional license.

Update:
The UI option to Block QUIC browser connections should not be displayed currently. An issue was found where the setting is enabled by default, where this should be disabled by default. 

The rollout of this feature has been put on hold until the policy enablement issue is resolved. Re-enabling the UI using flags and turning this feature on will not affect your endpoints. 

Some customers may see a pop-up message advising that this option is available. This pop-up message was not rolled back in time to align with this change.  

QUIC blocking is now live as an option in Central. The default state is Off.