topic Re: ACC shows ipv6 addresses in source/destination IP in General Topics

ACC shows ipv6 addresses in source/destination IP

RudolfTorvenyi1 — Sat, 13 Nov 2021 17:42:11 GMT

Hello, I have a PA-220 with PANOS 10.1.3 installed. I see IPv6 addresses in source/destination IP widget. It started from 10.1.x version

does anybody has the same issue?

Re: ACC shows ipv6 addresses in source/destination IP

BPry — Mon, 15 Nov 2021 04:03:24 GMT

@RudolfTorvenyi1,

Silly question, but do you have IPv6 enabled on your firewall? Stands to reason if you are getting IPv6 recorded that you simply have IPv6 enabled across one of your interfaces, and thus the traffic is getting recorded. I haven't seen any abnormal IPv6 traffic generation across my 10.1 lab endpoints where I don't actively have IPv6 enabled.

Re: ACC shows ipv6 addresses in source/destination IP

OtakarKlier — Mon, 15 Nov 2021 15:49:39 GMT

Hello,

Also turn off/disable IPv6 on the clients and devices everywhere you can. Its on usually by default.

Regards,

Re: ACC shows ipv6 addresses in source/destination IP

LAYER_8 — Mon, 15 Nov 2021 16:36:56 GMT

This is a known issue for 220 appliances on 10.1.3, PAN-175149.

This doesn't affect the traffic policies, content inspection, etc.. A cosmetic bug on the MGT interface at this time.

Re: ACC shows ipv6 addresses in source/destination IP

Craig5 — Thu, 23 Dec 2021 16:41:36 GMT

Issue still persists on 10.1.4 and 10.1.3 is preferred with claims that it's fixed.

Re: ACC shows ipv6 addresses in source/destination IP

Fedor_Travinsky — Fri, 24 Dec 2021 06:43:44 GMT

I confirm issue still there for PA-220. Tested on three units running PAN-OS 10.1.3 and 10.1.4.
Filed a support case.

Re: ACC shows ipv6 addresses in source/destination IP

LAYER_8 — Thu, 30 Dec 2021 16:50:17 GMT

This is expected behavior, following the link, PAN-175149 is unaddressed.

Re: ACC shows ipv6 addresses in source/destination IP

Craig5 — Fri, 31 Dec 2021 06:24:39 GMT

Sorry, but it says it's fixed in 10.1.3 and some users reported that it temporarily worked. I'm currently working with support which hasn't produced results yet.

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-3-known-and-addressed-issues/pan-os-10-1-3-addressed-issues.html

PAN-175149

(PA-800 and PA-7000 Series firewalls and the PA-220 firewall only) Fixed an issue where ACC and scheduled reports (

Monitor > Manage > Manage Custom Reports) incorrectly displayed the IPv6 address instead of the IPv4 address.

Re: ACC shows ipv6 addresses in source/destination IP

mgedik — Fri, 31 Dec 2021 10:05:45 GMT

I'm also waiting for this problem to be solved

Re: ACC shows ipv6 addresses in source/destination IP

aais — Sun, 02 Jan 2022 10:51:23 GMT

any solution ? problem is still persists pan 10.1.3 PA 220 ?

Re: ACC shows ipv6 addresses in source/destination IP

LAYER_8 — Wed, 05 Jan 2022 21:06:06 GMT

My apologies, you are correct. There is a duplicate bug for 220s and 800s now, PAN-163831. We are awaiting QA approval to push changes is most up to date information I can pull from JIRA for you.

Re: ACC shows ipv6 addresses in source/destination IP

Artemiusm — Thu, 20 Jan 2022 12:49:01 GMT

It has already been 2 weeks since the existence of the problem was finally recognized. When will the solution appear? It's not very convenient to work.

Re: ACC shows ipv6 addresses in source/destination IP

rmcrae — Thu, 27 Jan 2022 22:48:30 GMT

Sure would be nice to get this fixed. Still a problem on 10.1.4

Re: ACC shows ipv6 addresses in source/destination IP

LAYER_8 — Mon, 31 Jan 2022 19:05:42 GMT

I've consulted our JIRA again on this. Seems this bug is fixed in every hardware and vm platform except the 220.

The fix version is denoted 10.1.x (unsure why this is obscured), and 11.0. I will update this thread at the end of the week with followup from PM as what the fix version will be for the 220 platform.

Re: ACC shows ipv6 addresses in source/destination IP

rmcrae — Mon, 31 Jan 2022 20:14:11 GMT

Thanks for the update. Do you know if there is some sort of work around to get the IPv6 - IPv4 mapping maybe from the CLI?

Re: ACC shows ipv6 addresses in source/destination IP

Artemiusm — Tue, 01 Feb 2022 13:00:56 GMT

For P800 also need fix, please do not ignore us

Re: ACC shows ipv6 addresses in source/destination IP

LAYER_8 — Tue, 01 Feb 2022 18:53:44 GMT

PA800 series is marked as fixed in JIRA for 10.1.4 @Artemiusm

So the mapping is still intact. If you convert the IPv6 addresses from hex to decimal, you will get the IPv4 correct addresses. This is a rendering bug in the GUI, doesn't affect traffic flow or routing. Any commands to output device/IP mappings from CLI are shown to work for appliances.

What problem are you trying to solve for? Just ACC tab showing IPv4?

Re: ACC shows ipv6 addresses in source/destination IP

rob.bush — Tue, 01 Feb 2022 21:24:40 GMT

Running 10.1.4 and still not resolved. Very frustrating.

Re: ACC shows ipv6 addresses in source/destination IP

Artemiusm — Wed, 02 Feb 2022 02:15:30 GMT

Yes, IPv4 is still incorrectly displayed on the AC tab, and this is not "JUST" a slight inconvenience, our P800 serves more than 500 users and constantly resorting to monipulations to find out from an incomprehensible hex of a normal IP makes it very difficult to work when we should to monitor 24 hours. It all started with the 10th update, disabling ipv6 completely gives nothing.
PLEASE FIX THIS ERROR!

Re: ACC shows ipv6 addresses in source/destination IP

LAYER_8 — Fri, 04 Feb 2022 20:59:46 GMT

Running 10.1.4 on the PA800 still renders device showing IPv6? That platform is marked as resolved internally.

@rob.bush is that on a PA220 or 800 as well?