{"id":25,"date":"2026-04-05T22:17:00","date_gmt":"2026-04-05T19:17:00","guid":{"rendered":"https:\/\/mangen.kitabara.org\/?p=25"},"modified":"2026-04-21T22:37:20","modified_gmt":"2026-04-21T19:37:20","slug":"watchguard-firebox-and-https-proxy","status":"publish","type":"post","link":"https:\/\/mangen.kitabara.org\/index.php\/watchguard-firebox-and-https-proxy\/","title":{"rendered":"Understanding HTTPS Proxy and Content Inspection on WatchGuard Firebox"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Modern firewalls can inspect encrypted HTTPS traffic to provide deeper security, better visibility, and more accurate web filtering. WatchGuard Firebox offers two ways to use the HTTPS Proxy:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Without Content Inspection<\/strong> \u2014 simple domain\u2011level filtering using WebBlocker<\/li>\n\n\n\n<li><strong>With Content Inspection<\/strong> \u2014 full decryption and scanning using all UTM security services<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This guide explains both modes, how they work, when to use them, and how to deploy certificates for HTTPS inspection.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Understanding HTTP Proxy vs. HTTPS Proxy<\/h1>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>HTTP Proxy<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The HTTP Proxy defines what checks the firewall performs on general web\u2011browsing traffic \u2014 both HTTP and HTTPS.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a283b6&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a283b6\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"821\" height=\"799\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTP-Proxy-action.png\" alt=\"\" class=\"wp-image-55\" style=\"aspect-ratio:1.438895134093464;width:337px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTP-Proxy-action.png 821w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTP-Proxy-action-300x292.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTP-Proxy-action-768x747.png 768w\" sizes=\"auto, (max-width: 821px) 100vw, 821px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>HTTPS Proxy<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The HTTPS Proxy determines <strong>which HTTPS sites are inspected<\/strong> and <strong>which HTTPS connections are exempted<\/strong>.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a288e1&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a288e1\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1013\" height=\"786\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-action.png\" alt=\"\" class=\"wp-image-56\" style=\"aspect-ratio:1.286555305604748;width:337px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-action.png 1013w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-action-300x233.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-action-768x596.png 768w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-action-850x660.png 850w\" sizes=\"auto, (max-width: 1013px) 100vw, 1013px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">HTTPS Proxy <em>Without<\/em> Content Inspection<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">When Content Inspection is disabled, you only need to attach a <strong>WebBlocker profile<\/strong> to the HTTPS Proxy action. This setup requires <strong>no workstation configuration<\/strong> and <strong>no certificate installation<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u2714\ufe0f What you get<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Domain\u2011level visibility (SNI, certificate CN, server domain info)<\/li>\n\n\n\n<li>Basic category filtering via WebBlocker<\/li>\n<\/ul>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a28eda&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a28eda\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"783\" height=\"759\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/WebBlocker-action.png\" alt=\"\" class=\"wp-image-54\" style=\"aspect-ratio:1.0316429893059869;width:340px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/WebBlocker-action.png 783w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/WebBlocker-action-300x291.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/WebBlocker-action-768x744.png 768w\" sizes=\"auto, (max-width: 783px) 100vw, 783px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">\u26a0\ufe0f Limitations<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>WebBlocker cannot see the full URL \u2014 only the certificate information<\/li>\n\n\n\n<li>The firewall cannot display a block message when a page is blocked<\/li>\n<\/ul>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a293ed&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a293ed\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"670\" height=\"608\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Gambling-site-browser-deny.png\" alt=\"\" class=\"wp-image-53\" style=\"aspect-ratio:0.9797882228580802;width:339px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Gambling-site-browser-deny.png 670w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Gambling-site-browser-deny-300x272.png 300w\" sizes=\"auto, (max-width: 670px) 100vw, 670px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This mode is ideal when you want lightweight filtering without touching client devices.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">HTTPS Proxy <em>With<\/em> Content Inspection<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This is the recommended configuration. When enabled, the firewall decrypts HTTPS traffic, inspects it using all UTM services, and re\u2011encrypts it before sending it to the client.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u2714\ufe0f How to enable it<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You can turn on Content Inspection in two ways:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Directly in the HTTPS Proxy<strong> <\/strong>policy <strong>Content Inspection<\/strong> settings<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a299fd&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a299fd\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1010\" height=\"786\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-on.png\" alt=\"\" class=\"wp-image-52\" style=\"aspect-ratio:1.2850176881154987;width:341px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-on.png 1010w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-on-300x233.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-on-768x598.png 768w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-on-850x661.png 850w\" sizes=\"auto, (max-width: 1010px) 100vw, 1010px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>recommended<\/strong> way, <strong>HTTPS Proxy \/ WebBlocker<\/strong> <strong>settings<\/strong> and by setting all categories to <strong>Inspect<\/strong> and enabling &#8220;<strong>Inspect when a URL is uncategorized<\/strong>&#8220;<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a29ebd&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a29ebd\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1001\" height=\"781\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-webblocker-on.png\" alt=\"\" class=\"wp-image-51\" style=\"aspect-ratio:1.2817089452603472;width:339px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-webblocker-on.png 1001w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-webblocker-on-300x234.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-webblocker-on-768x599.png 768w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/HTTPS-Proxy-inspect-webblocker-on-850x663.png 850w\" sizes=\"auto, (max-width: 1001px) 100vw, 1001px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">When enabling inspection through WebBlocker settings, leave <strong>Content Inspection \u2192 Action = Allow<\/strong> (default).<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li><\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">\u2714\ufe0f What you get<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Full UTM scanning (IPS, AV, APT Blocker, DLP, App Control, etc.)<\/li>\n\n\n\n<li>Full URL visibility<\/li>\n\n\n\n<li>Ability to show block pages<\/li>\n\n\n\n<li>Stronger security posture<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u26a0\ufe0f Requirements<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Content Inspection requires <strong>certificate deployment<\/strong> to client devices.<\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Certificate Deployment for HTTPS Inspection<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">When Content Inspection is enabled, the firewall becomes a <strong>man\u2011in\u2011the\u2011middle<\/strong>: the client connects to the firewall, and the firewall opens a new HTTPS connection to the destination site.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"555\" height=\"125\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Man-in-the-middle.png\" alt=\"\" class=\"wp-image-50\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Man-in-the-middle.png 555w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Man-in-the-middle-300x68.png 300w\" sizes=\"auto, (max-width: 555px) 100vw, 555px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Because of this, clients must trust the firewall\u2019s signing certificate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Two deployment options<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Option A \u2014 Use Firebox\u2019s built\u2011in Proxy Authority certificate<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Export the Proxy Authority Root CA<\/li>\n\n\n\n<li>Install it on all workstations<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><strong>Option B \u2014 Use an AD\u2011signed subordinate CA (recommended for enterprises)<\/strong><\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Create a new <a href=\"https:\/\/www.youtube.com\/watch?v=2bJyTuAeQK4\" data-type=\"link\" data-id=\"https:\/\/www.youtube.com\/watch?v=2bJyTuAeQK4\" target=\"_blank\" rel=\"noopener\">HTTPS Proxy Authority certificate<\/a><\/li>\n\n\n\n<li>Sign it using AD Certificate Services<\/li>\n\n\n\n<li>Import the AD Root CA and the signed Proxy Authority certificate into the firewall<\/li>\n\n\n\n<li>No workstation installation needed (AD clients already trust the CA)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Deployment methods<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Manual installation via <strong>certmgr.msc<\/strong><\/li>\n\n\n\n<li>Automated deployment via <strong>GPO<\/strong> or <strong>Intune<\/strong><\/li>\n<\/ul>\n\n\n\n<figure data-wp-context=\"{&quot;galleryId&quot;:&quot;6a67411a2acdf&quot;}\" data-wp-interactive=\"core\/gallery\" class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a2b048&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a2b048\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"945\" height=\"493\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" data-id=\"49\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certportal.png\" alt=\"\" class=\"wp-image-49\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certportal.png 945w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certportal-300x157.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certportal-768x401.png 768w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certportal-850x443.png 850w\" sizes=\"auto, (max-width: 945px) 100vw, 945px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a2b4a6&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a2b4a6\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"842\" height=\"422\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" data-id=\"48\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/FSM-Certificates-export.png\" alt=\"\" class=\"wp-image-48\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/FSM-Certificates-export.png 842w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/FSM-Certificates-export-300x150.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/FSM-Certificates-export-768x385.png 768w\" sizes=\"auto, (max-width: 842px) 100vw, 842px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a2b8d9&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a2b8d9\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"718\" height=\"398\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" data-id=\"47\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certmgr-import-cert.png\" alt=\"\" class=\"wp-image-47\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certmgr-import-cert.png 718w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Certmgr-import-cert-300x166.png 300w\" sizes=\"auto, (max-width: 718px) 100vw, 718px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n<\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">Firefox note<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Firefox uses its own certificate store unless: <code>security.enterprise_roots.enabled = true<\/code><\/p>\n\n\n\n<h1 class=\"wp-block-heading\">Handling Sites That Break Under Inspection<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Some websites do not work with HTTPS inspection. These can be excluded in two ways:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>A. Domain\u2011based exceptions<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Add domains to: <strong>HTTPS Proxy \u2192 Action \u2192 Content Inspection \u2192 Domain Names<\/strong><\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a2c27b&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a2c27b\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"995\" height=\"732\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain.png\" alt=\"\" class=\"wp-image-46\" style=\"aspect-ratio:1.35929203539823;width:340px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain.png 995w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-300x221.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-768x565.png 768w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-850x625.png 850w\" sizes=\"auto, (max-width: 995px) 100vw, 995px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Most exceptions are already handled by WatchGuard\u2019s <strong>Managed Exceptions<\/strong> list.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a2c720&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a2c720\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"807\" height=\"632\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Manage-Exception-list.png\" alt=\"\" class=\"wp-image-44\" style=\"width:340px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Manage-Exception-list.png 807w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Manage-Exception-list-300x235.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Manage-Exception-list-768x601.png 768w\" sizes=\"auto, (max-width: 807px) 100vw, 807px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>B. Category\u2011based exceptions (WebBlocker method)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you enabled inspection via WebBlocker, you can disable inspection for entire categories. Example: To bypass banking sites, remove the <strong>Inspect<\/strong> checkbox from <em>Business and Economy \u2192 Financial Data and Services<\/em>.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a2cc17&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a2cc17\" class=\"wp-block-image size-full is-resized wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1006\" height=\"419\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-in-webblocker.png\" alt=\"\" class=\"wp-image-45\" style=\"aspect-ratio:2.4009646733062393;width:341px;height:auto\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-in-webblocker.png 1006w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-in-webblocker-300x125.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-in-webblocker-768x320.png 768w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Content-Inspection-allow-domain-in-webblocker-850x354.png 850w\" sizes=\"auto, (max-width: 1006px) 100vw, 1006px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<h1 class=\"wp-block-heading\">Deny HTTP\/2 (QUIC) protocol traffic.<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Some web browsers (like Chrome, Edge, Firefox) can use a newer protocol called QUIC.<br>QUIC sends traffic over UDP port 443 instead of the normal HTTPS TCP port 443.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Your WatchGuard firewall cannot inspect QUIC, so users could bypass:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>WebBlocker<\/li>\n\n\n\n<li>SafeSearch<\/li>\n\n\n\n<li>HTTPS inspection<\/li>\n\n\n\n<li>Other security controls<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This means QUIC can let users reach sites your policy normally blocks.<br><br>Check <a href=\"https:\/\/techsearch.watchguard.com\/KB?type=Article&amp;SFDCID=kA10H000000g3dzSAA&amp;lang=en_US\" data-type=\"link\" data-id=\"https:\/\/techsearch.watchguard.com\/KB?type=Article&amp;SFDCID=kA10H000000g3dzSAA&amp;lang=en_US\" target=\"_blank\" rel=\"noopener\">How to prevent connections from browsers that bypass WebBlocker and SafeSearch restrictions with QUIC protocol?<\/a><br><br>You have three ways to block QUIC:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. Block UDP port 443 on the firewall<br>If you deny outbound UDP\/443, browsers automatically fall back to normal HTTPS.<br>This restores all your security controls.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6a67411a2d298&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6a67411a2d298\" class=\"wp-block-image size-large wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"171\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"http:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Deny-QUIC-protocol-1024x171.png\" alt=\"\" class=\"wp-image-132\" srcset=\"https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Deny-QUIC-protocol-1024x171.png 1024w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Deny-QUIC-protocol-300x50.png 300w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Deny-QUIC-protocol-768x128.png 768w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Deny-QUIC-protocol-850x142.png 850w, https:\/\/mangen.kitabara.org\/wp-content\/uploads\/2026\/04\/Deny-QUIC-protocol.png 1028w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">2. Use Application Control to block QUIC<br>You can enable App Control and set QUIC = Deny.<br>This also forces browsers to stop using QUIC.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. Turn off QUIC in the browser<br>You can disable QUIC\/HTTP3 in Chrome, Edge, Firefox, etc.<br>This is optional if the firewall already blocks UDP\/443.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">QUIC bypasses your security because it uses UDP\/443, so blocking UDP\/443 or denying QUIC forces browsers back to normal HTTPS where your security rules work.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Modern firewalls can inspect encrypted HTTPS traffic to provide deeper security, better visibility, and more accurate web filtering. WatchGuard Firebox offers two ways to use the HTTPS Proxy: This guide explains both modes, how they work, when to use them, and how to deploy certificates for HTTPS inspection. Understanding HTTP Proxy vs. HTTPS Proxy HTTP&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,2],"tags":[],"class_list":["post-25","post","type-post","status-publish","format-standard","hentry","category-https-proxy","category-watchguard"],"_links":{"self":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/25","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/comments?post=25"}],"version-history":[{"count":27,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/25\/revisions"}],"predecessor-version":[{"id":142,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/posts\/25\/revisions\/142"}],"wp:attachment":[{"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/media?parent=25"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/categories?post=25"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mangen.kitabara.org\/index.php\/wp-json\/wp\/v2\/tags?post=25"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}