topic Re: IPv6 and IPv4 addresses in same security rule? in General Topics https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15147#M11119 <HTML><HEAD></HEAD><BODY><P>I guess this shows the level of interest in v6</P><P></P><P>I've played around with it a bit more and it appears you <STRONG>can </STRONG>mix v4 and v6 address in a security rule but not if you are doing negative matching in which case the v4 address gets ignored.&nbsp; Is this a bug, known behaviour, anyone?</P></BODY></HTML> Fri, 09 Mar 2012 11:59:13 GMT LCMember2860 2012-03-09T11:59:13Z IPv6 and IPv4 addresses in same security rule? https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15146#M11118 <HTML><HEAD></HEAD><BODY><P>is there an issue with doing this - I have a rule set to match any address <STRONG>except </STRONG>one particular IPv4 subnet (ie using the <EM>negate </EM>function) - works fine.</P><P></P><P>I added an IPv6 prefix to the rule (still negated) - now the rule negatively matches the v6 address, but no longer the v4 address.&nbsp; Remove the v6 address from the rule and the v4 address negatively matches again.</P><P></P><P>I'm therefore assuming I have to keep v4 and v6 rules separate, but I can't find this documented anywhere....</P><P></P><P>PAN-OS 4.1.3</P><P></P><P>Liam.</P></BODY></HTML> Tue, 06 Mar 2012 11:33:51 GMT https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15146#M11118 LCMember2860 2012-03-06T11:33:51Z Re: IPv6 and IPv4 addresses in same security rule? https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15147#M11119 <HTML><HEAD></HEAD><BODY><P>I guess this shows the level of interest in v6</P><P></P><P>I've played around with it a bit more and it appears you <STRONG>can </STRONG>mix v4 and v6 address in a security rule but not if you are doing negative matching in which case the v4 address gets ignored.&nbsp; Is this a bug, known behaviour, anyone?</P></BODY></HTML> Fri, 09 Mar 2012 11:59:13 GMT https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15147#M11119 LCMember2860 2012-03-09T11:59:13Z Re: IPv6 and IPv4 addresses in same security rule? https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15148#M11120 <HTML><HEAD></HEAD><BODY><P>Sounds like you should file this as a bug through your sales rep.</P><P></P><P>I think its still somewhat uncommon with IPv6 and those who did the switch use IPv6 instead of IPv4 (no dualstacking) so they wont stumble into the bug you just found.</P><P></P><P>There are also methods to use 4to6 and 6to4 if you use devices such as BIG-IP from F5 (among others) so this will also avoid dualstacking on the servers (with 4to6/6to4 your servers can still be IPv4 native and the loadbalancer will take care of the transition).</P></BODY></HTML> Fri, 09 Mar 2012 23:28:04 GMT https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15148#M11120 mikand 2012-03-09T23:28:04Z Re: IPv6 and IPv4 addresses in same security rule? https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15149#M11121 <HTML><HEAD></HEAD><BODY><P>Please open a Support case so that we can file a bug. This is not an expected behavior.</P></BODY></HTML> Thu, 06 Sep 2012 22:20:12 GMT https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15149#M11121 zarina 2012-09-06T22:20:12Z Re: IPv6 and IPv4 addresses in same security rule? https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15150#M11122 <HTML><HEAD></HEAD><BODY><P>Hi ,</P><P></P><P>This is a known issue and our team is actively working on the fix for this.</P><P></P><P>Thanks,</P><P>Sandeep T</P></BODY></HTML> Thu, 06 Sep 2012 23:15:05 GMT https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/15150#M11122 sdurga 2012-09-06T23:15:05Z Re: IPv6 and IPv4 addresses in same security rule? https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/471990#M103166 <P>Good Day,</P><P>&nbsp;</P><P>Please can you let me know if this has been resolved in PANOS 9.1.11-h3?</P><P>&nbsp;</P><P>Lance</P> Thu, 10 Mar 2022 14:33:48 GMT https://live.paloaltonetworks.com/t5/general-topics/ipv6-and-ipv4-addresses-in-same-security-rule/m-p/471990#M103166 Lance 2022-03-10T14:33:48Z