ipv6 tunneled in ipv4 (protocol 41)

LoopSupport — Mon, 31 Jan 2011 05:02:49 GMT

Hi,

What application in the Palo Alto Application database matches with IP protocol 41 (used for tunneling IPv6 in IPv4?

When doing Source NAT, is IP protocol 41 NATed?

Thanks

Re: ipv6 tunneled in ipv4 (protocol 41)

ncampagna — Mon, 31 Jan 2011 17:40:24 GMT

Hello,

We have several App-IDs that can be used to block IPv6-in-IPv4 tunneling:

1. Teredo

2. ISATAP

3. IPv6 - This will detect other forms of tunneling not identified by the above App-IDs.

These packets should be translated without modifying the IP protocol information.

Thanks,

Nick