This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

QUIC Protocol masOS Safari

Hi all. we are experiencing issues with QUIC. New sites are using QUIC and this is stopping inspection and web control. We have fixed the issue with Chrome, but many of our global users use Safari. QUIC is baked into Safari and therefore no option to disable. In the log for Sophos antivirus you can see a log that xx.com has been blocked but no indication on safari. (other browsers has the 'This has been blocked' banner)

Has anyone has any luck with Sophos cloud endpoint/Safari/QUIC?

This thread was automatically locked due to age.

0 Gladys 4 months ago

Hi Kelly Redding ,

Thank you for reaching out to the Sophos Community forum.

In your Threat Protection policy, is this setting currently enabled?

Gladys Reyes
Global Community Support Engineer
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the "Verify Answer" button.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Kelly Redding 4 months ago

Hi, thanks for sharing that. But this only applies to Windows devices.

We are a mac-based enterprise. Safari is the only browser that we can’t stop QUIC and thus inspection / web control is failing.

Best,

K
Cancel
Vote Up 0 Vote Down

Cancel
0 Wayne Folta 4 months ago in reply to Kelly Redding

You can block QUIC at the firewall. Sophos firewalls have a specific switch for each firewall rule. Most QUIC-using software tries it and if it fails, falls back to other mechanisms. (I think I've had instances where blocking QUIC after a device/program had decided QUIC was working caused the program to have issues and I needed to re-launch or reboot the device.)
Cancel
Vote Up 0 Vote Down

Cancel