Security Challenges in Network Communication Caused by the Quic Protocol

Quic (Quick UDP Internet Connections) emerges as an innovative protocol aimed at enhancing the speed and security of HTTP (Hypertext Transfer Protocol) traffic, potentially superseding TCP (Transmission Control Protocol) based TLS (Transport Layer Security) in web applications. While some web browsers have incorporated it as a default setting, its adoption by various websites is on the rise. A significant challenge arises as network security devices categorize Quic traffic merely as generic UDP (User Datagram Protocol) rather than distinct web traffic. Consequently, conventional web filter mechanisms fail to scrutinize or log Quic traffic, leading to potential vulnerabilities by allowing access to prohibited or malicious sites. This study delves into the functionality of Quic, and its implications for network security, and offers insights from leading firewall vendors on addressing the nuances of Quic protocol inspection. Furthermore, our evaluation of a FortiGate virtual appliance underscores that the existing web filter engine remains ineffectual in inspecting, logging, or reporting Quic web traffic.