Block UDP 443 outbound

seanmccoy — Fri, 04 Mar 2022 15:59:53 GMT

Need some assistance creating a security rule to block UDP 443 outbound on my PA-3250 firewall.

Re: Block UDP 443 outbound

Adrian_Jensen — Sat, 05 Mar 2022 04:51:37 GMT

Is there something unusual in the setup or? It should be fairly simple to block all outbound UDP/443 traffic if that is what you want to do.

Objects -> Services

Add new service for UPP/443 traffic, i.e.:

name=UDP443

Protocol=UDP

Destination Port=443

Policy -> Security

Add new security rule:

General->name = Block_UDP443

Source->Zone = Trust (or whatever your internal zone is)

Destination->Zone = UnTrust (or whatever your WAN zone is)

Service/URL Category->Service = UDP443 (added above)

Actions->Action Setting = Deny

Or do you actually want to block QUIC traffic?

Policy -> Security

Add new security rule:

General->name = Block_QUIC

Source->Zone = Trust (or whatever your internal zone is)

Destination->Zone = UnTrust (or whatever your WAN zone is)

Application->Applications = quic

Service/URL Category->Service = application-default

Actions->Action Setting = Deny