Troubleshooting Tip: Quic protocol is blocked despite there is no block policy in multi-vdom

[iskandar_lie]

Description	This article describes why the Quic protocol is blocked despite there being no block policy in multi-vdom with mixed profile: policy mode setup.
Scope	FortiGate v7.0.x.
Solution	In this scenario:  1) Multi-vdom firewall with mixed profile: policy-based mode. 2) Root VDOM is a profile-based mode. 3) This subsequent VDOM is policy-based mode  Quic traffic is blocked in subsequent VDOM: The firewall policy is without UTM enabled or any block rule: Workaround:: Changing root VDOM from profile to policy-based mode.  Conclusion: In a multi-vdom setup, if the root VDOM is profile based and the subsequent VDOMS in policy-based, it is required to change the root VDOM to policy based to allow Quic. Also, the firewall should have an IPS engine version 7.000100 or higher. Related documents: Technical Tip: Block QUIC Protocol - Fortinet Community Technical Tip : How to block/disable QUIC - Fortinet Community Technical Note: Disabling / Blocking QUIC Protocol... - Fortinet Community