9 ms·
QUIC is the standard problem across n number of clients who choose Zscaler and similar content inspection tools. You can block it at the policy level but you al
by latentpot 2y ago
QUIC is the standard problem across n number of clients who choose Zscaler and similar content inspection tools. You can block it at the policy level but you also need to have it disabled at the browser level. Which sometimes magically turns on again and leads to a flurry of tickets for 'slow internet', 'Google search not working' etcetera.
- watermelon0 2y agoWouldn't the issue in this case be with Zscaler, and not with QUIC?
- chgs 2y agoThe problem here is choosing software like zscaler
- mcosta 2y agoZscaler is not chosen, it is imposed by the corporation
- v1ne 2y agoHmm, interesting. We also have a policies imposed by the Regulator™ that leads to us inspecting all web traffic. All web traffic goes through a proxy that's configured in the web browser. No proxy, no internet. Out of curiosity: What's your use case to use ZScaler for this inspection instead?
- chgs 2y agoYou hairpin traffic through your own vpn? How does MITM work with QUIC?