IPv6 Support on the Palo Alto Networks Firewall
0
Created On 09/25/18 19:20 PM - Last Modified 06/07/23 19:43 PM
Resolution This article is outdated, please refer to this article for up-to-date information:
IPv6 Feature Support
Current information for IPv6 support on the Palo Alto Networks firewall is available at the link below. For further information, a link to a white paper on IPv6 is available at the bottom of the page.
Secure IPv6 Environment - Palo Alto Networks
IPv6 Feature Support for PAN-OS 4.1 - 7.0
Feature
IPv6 Support
PAN-OS 4.1 PAN-OS 5.0 PAN-OS 6.0 PAN-OS 6.1 PAN-OS 7.0 App-ID Yes Yes Yes Yes Yes Content-ID Yes Yes Yes Yes Yes User-ID No Yes Yes Yes Yes DoS Rulebase Yes Yes Yes Yes Yes Zone Protection Yes Yes Yes Yes Yes SSL Decryption Yes Yes Yes Yes Yes NAT No NAT64 NAT64 NAT64 NAT64 PBF Yes Yes Yes Yes Yes QoS Yes Yes Yes Yes Yes DHCPv6 Relay Yes Yes Yes Yes Yes DHCPv6 Server No No No No No DNS Proxy Yes Yes Yes Yes Yes Dynamic Routing No No OSPFv3 OSPFv3 OSPFv3 SSL VPN No No No No No IPSec VPN (IPv6 in IPv4 tunnel) No Yes Yes Yes Yes IPSec VPN (IPv6 tunnel) No No No No Yes Plaintext Tunneling (6to4, ISATAP, etc) No No No No No NPTv6 No No No No Yes
IPv6 RFCs Support for PAN-OS 5.0
RFC Support (PAN-OS 5.0) RFC 2460: Internet Protocol, Version 6 (IPv6) Specification RFC 5095: Deprecation of Type 0 Routing Headers in IPv6 Provide option to block packets with type 0 routing header in zone protection profile. RFC 4443: Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version 6 (IPv6) Specification Ping from box with link-local address is not supported. RFC 4861: Neighbor Discovery for IP version 6 (IPv6) RFC 4862: IPv6 Stateless Address Autoconfiguration RFC 1981: Path MTU Discovery for IP version 6 RFC 4291: IP Version 6 Addressing Architecture RFC 4007: IPv6 Scoped Address Architecture RFC 2710: Multicast Listener Discovery (MLD) for IPv6 MLDv1 for ND support RFC 2711: IPv6 Router Alert Option MLD only RFC 2464: Transmission of IPv6 Packets over Ethernet Networks Dual stack only.
owner: panagent