ZTNA and UDP: Nginx URL as a bypass in a secure application?

Hi Ronny

Could you please explain further what you mean by "bypassed by an URL on nginx.org"?

Hi,

ZTNA support for UDP traffic | FortiGate / FortiOS 7.6.0 | Fortinet Document Library

"After authentication, security posture check, and authorization, FortiGate forms a UDP connection with the destination (quic.nginx.org), and the end-to-end UDP traffic passes through, allowing the endpoint to reach three different destinations through UDP"

Hi Secucard

I didn't try UDP on ZTNA yet but after reading the doc I don't find that the UDP traffic bypasses the FortiGate ZTNA gateway (here quic.nginx.org is an example for PoC), and I understand from the doc that ZTNA handles UDP traffic approximately the same way as TCP.

Or did I misunderstand your question?

Well, for me, it is kind of strange docs from Fortinet.

It looks like it uses external Proxy quic.nginx.org

Or do they just mean the implementation of the quic protocol *FROM* Nginx?

Would be nice, if someone from Fortinet could answer this, because, on my Ticket, I did not receive an answer yet. Thanks