topic Re: Deep packet inspection of IPv6 traffic in General Topics

Deep packet inspection of IPv6 traffic

FirstSolar — Thu, 02 Jun 2011 13:03:42 GMT

How can we have deep packet inspection of IPv6 traffic, if the traffic (by default) is encrypted?

Re: Deep packet inspection of IPv6 traffic

mrajdev — Thu, 02 Jun 2011 18:52:35 GMT

What encryption is happening for the IPV6 traffic?

Re: Deep packet inspection of IPv6 traffic

ncampagna — Fri, 03 Jun 2011 20:58:24 GMT

Hi FirstSolar,

IPv6 traffic is not encrypted by default. In normal circumstances, IPv6 traffic is passed in plaintext (just like IP version 4). PAN-OS does support SSL decryption on IPv6 sessions if that is a concern.

We do not currently terminate IPv6 tunnels so that type of traffic would have to be decrypted prior to entering the firewall or else it could not be inspected.

Hope this helps,

Nick Campagna