QUIC Protocol masOS Safari

Hi all. we are experiencing issues with QUIC. New sites are using QUIC and this is stopping inspection and web control. We have fixed the issue with Chrome, but many of our global users use Safari. QUIC is baked into Safari and therefore no option to disable. In the log for Sophos antivirus you can see a log that xx.com has been blocked but no indication on safari. (other browsers has the 'This has been blocked' banner)

Has anyone has any luck with Sophos cloud endpoint/Safari/QUIC?

Added tags
[edited by: Gladys at 10:15 AM (GMT -8) on 5 Mar 2024]

Parents

0 Kelly Redding 2 months ago

Hi, thanks for sharing that. But this only applies to Windows devices.

We are a mac-based enterprise. Safari is the only browser that we can’t stop QUIC and thus inspection / web control is failing.

Best,

K
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Wayne Folta 2 months ago in reply to Kelly Redding

You can block QUIC at the firewall. Sophos firewalls have a specific switch for each firewall rule. Most QUIC-using software tries it and if it fails, falls back to other mechanisms. (I think I've had instances where blocking QUIC after a device/program had decided QUIC was working caused the program to have issues and I needed to re-launch or reboot the device.)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Wayne Folta 2 months ago in reply to Kelly Redding

You can block QUIC at the firewall. Sophos firewalls have a specific switch for each firewall rule. Most QUIC-using software tries it and if it fails, falls back to other mechanisms. (I think I've had instances where blocking QUIC after a device/program had decided QUIC was working caused the program to have issues and I needed to re-launch or reboot the device.)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data