IPv6 Support on the Palo Alto Networks Firewall

IPv6 Support on the Palo Alto Networks Firewall

18032
Created On 09/25/18 19:20 PM - Last Updated 02/07/19 23:57 PM


Resolution

This article is outdated, please refer to this article for up-to-date information:

IPv6 Support by Feature

 

 

IPv6 Feature Support

Current information for IPv6 support on the Palo Alto Networks firewall is available at the link below. For further information, a link to a white paper on IPv6 is available at the bottom of the page.

Secure IPv6 Environment - Palo Alto Networks

 

IPv6 Feature Support for PAN-OS 4.1 - 7.0

Feature

IPv6 Support

 PAN-OS 4.1PAN-OS 5.0PAN-OS 6.0PAN-OS 6.1PAN-OS 7.0
App-IDYesYesYesYesYes
Content-IDYesYesYesYesYes
User-IDNoYesYesYesYes
DoS RulebaseYesYesYesYesYes
Zone ProtectionYesYesYesYesYes
SSL DecryptionYesYesYesYesYes
NATNoNAT64NAT64NAT64NAT64
PBFYesYesYesYesYes
QoSYesYesYesYesYes
DHCPv6 RelayYesYesYesYesYes
DHCPv6 ServerNoNoNoNoNo
DNS ProxyYesYesYesYesYes
Dynamic RoutingNoNoOSPFv3OSPFv3OSPFv3
SSL VPNNoNoNoNoNo
IPSec VPN (IPv6 in IPv4 tunnel)NoYesYesYesYes
IPSec VPN (IPv6 tunnel)NoNoNoNoYes
Plaintext Tunneling (6to4, ISATAP, etc)NoNoNoNoNo
NPTv6NoNoNoNoYes

 

IPv6 RFCs Support for PAN-OS 5.0

RFCSupport (PAN-OS 5.0)
RFC 2460: Internet Protocol, Version 6 (IPv6) Specification 
RFC 5095: Deprecation of Type 0 Routing Headers in IPv6Provide option to block packets with type 0 routing header in zone protection profile.
RFC 4443: Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) SpecificationPing from box with link-local address is not supported.
RFC 4861: Neighbor Discovery for IP version 6 (IPv6) 
RFC 4862: IPv6 Stateless Address Autoconfiguration 
RFC 1981: Path MTU Discovery for IP version 6 
RFC 4291: IP Version 6 Addressing Architecture 
RFC 4007: IPv6 Scoped Address Architecture 
RFC 2710: Multicast Listener Discovery (MLD) for IPv6MLDv1 for ND support
RFC 2711: IPv6 Router Alert OptionMLD only
RFC 2464: Transmission of IPv6 Packets over Ethernet NetworksDual stack only.

 

owner: panagent



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVRCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language