cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Does MWG intercept UDP Connections?

I setup a littel transparent testscrenario (mwg as transparent router)

Each connection to 80/443 is redirected to the proxy.

With I client I had the problem to intercept exisiting youtube connection.

I took some investigations and was very suprised that the youtube stream was delivered by ssl with UDP!!!!

This connection was not seen in any ruletrace / log. So I expect UDP will not be analyezed by the proxy.

Is there a way to force using TCP? Or to examine UDP also?

Frank

5 Replies
Highlighted

Re: Does MWG intercept UDP Connections?

Ok. This seems to be related to QUIC which Youtube uses....

Google's QUIC protocol: moving the web from TCP to UDP

Will this be covered by the MWG?

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 6

Re: Does MWG intercept UDP Connections?

Hello Frank,

QUIC isn't supported by the Web Gateway. It will start an encrypted tunnel on UDP were Web Gateway won't have the key for.

-Sergej

Highlighted

Re: Does MWG intercept UDP Connections?

Is it possible to see QUIC In explicit environment? I think no - is this right?

(Another reason to prefer explicit proxies.... ?)

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 6

Re: Does MWG intercept UDP Connections?

I cant remember had seen this by troubleshooting youtube in explicit proxy environment. I think google will have such a kind of fall back mechanist to continue on existing tunnel.

-Sergej

Highlighted

Re: Does MWG intercept UDP Connections?

It looks like. I blocked port 443 for UDP and the connection switched back to normal SSL with TCP.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community