topic GlobalProtect IPv6 findings in GlobalProtect Discussions https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-ipv6-findings/m-p/535441#M3816 <P>With the IPv6 sinkholing feature not enabled, Mac and Windows users used to be able to successfully connect to IPv6 resources--seemingly completely bypassing GlobalProtect.&nbsp; Then some Mac users reported not being able to connect to those IPv6 resources anymore.</P> <P>&nbsp;</P> <P>The wisdom of allowing this IPv6 connectivity is of course debatable and it probably should be (will be eventually) sinkholed.</P> <P>&nbsp;</P> <P>Anyways, we tested some things and found that the connections worked on MacOS 13.0.1, but not on 13.2.&nbsp; We did not test versions in between to figure out exactly where it broke.</P> <P>&nbsp;</P> <P>By adding a static route on the Mac the user was able to regain their IPv6 connectivity.&nbsp; This static route was for ::/0 and pointed to the IPv6 gateway address of their Internet router.&nbsp; This will break when they move networks but is a suitable workaround.</P> Wed, 22 Mar 2023 15:07:37 GMT AaronAxvig 2023-03-22T15:07:37Z GlobalProtect IPv6 findings https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-ipv6-findings/m-p/535441#M3816 <P>With the IPv6 sinkholing feature not enabled, Mac and Windows users used to be able to successfully connect to IPv6 resources--seemingly completely bypassing GlobalProtect.&nbsp; Then some Mac users reported not being able to connect to those IPv6 resources anymore.</P> <P>&nbsp;</P> <P>The wisdom of allowing this IPv6 connectivity is of course debatable and it probably should be (will be eventually) sinkholed.</P> <P>&nbsp;</P> <P>Anyways, we tested some things and found that the connections worked on MacOS 13.0.1, but not on 13.2.&nbsp; We did not test versions in between to figure out exactly where it broke.</P> <P>&nbsp;</P> <P>By adding a static route on the Mac the user was able to regain their IPv6 connectivity.&nbsp; This static route was for ::/0 and pointed to the IPv6 gateway address of their Internet router.&nbsp; This will break when they move networks but is a suitable workaround.</P> Wed, 22 Mar 2023 15:07:37 GMT https://live.paloaltonetworks.com/t5/globalprotect-discussions/globalprotect-ipv6-findings/m-p/535441#M3816 AaronAxvig 2023-03-22T15:07:37Z