06-02-2011 06:03 AM
How can we have deep packet inspection of IPv6 traffic, if the traffic (by default) is encrypted?
06-03-2011 01:58 PM
Hi FirstSolar,
IPv6 traffic is not encrypted by default. In normal circumstances, IPv6 traffic is passed in plaintext (just like IP version 4). PAN-OS does support SSL decryption on IPv6 sessions if that is a concern.
We do not currently terminate IPv6 tunnels so that type of traffic would have to be decrypted prior to entering the firewall or else it could not be inspected.
Hope this helps,
Nick Campagna
06-02-2011 11:52 AM
What encryption is happening for the IPV6 traffic?
06-03-2011 01:58 PM
Hi FirstSolar,
IPv6 traffic is not encrypted by default. In normal circumstances, IPv6 traffic is passed in plaintext (just like IP version 4). PAN-OS does support SSL decryption on IPv6 sessions if that is a concern.
We do not currently terminate IPv6 tunnels so that type of traffic would have to be decrypted prior to entering the firewall or else it could not be inspected.
Hope this helps,
Nick Campagna
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
