Deep packet inspection of IPv6 traffic

Reply
FirstSolar
L0 Member

Deep packet inspection of IPv6 traffic

How can we have deep packet inspection of IPv6 traffic, if the traffic (by default) is encrypted?


Accepted Solutions
ncampagna
Palo Alto Networks Guru

Hi FirstSolar,

IPv6 traffic is not encrypted by default.  In normal circumstances, IPv6 traffic is passed in plaintext (just like IP version 4).  PAN-OS does support SSL decryption on IPv6 sessions if that is a concern. 

We do not currently terminate IPv6 tunnels so that type of traffic would have to be decrypted prior to entering the firewall or else it could not be inspected.

Hope this helps,

Nick Campagna

View solution in original post


All Replies
mrajdev
L4 Transporter

What encryption is happening for the IPV6 traffic? 

ncampagna
Palo Alto Networks Guru

Hi FirstSolar,

IPv6 traffic is not encrypted by default.  In normal circumstances, IPv6 traffic is passed in plaintext (just like IP version 4).  PAN-OS does support SSL decryption on IPv6 sessions if that is a concern. 

We do not currently terminate IPv6 tunnels so that type of traffic would have to be decrypted prior to entering the firewall or else it could not be inspected.

Hope this helps,

Nick Campagna

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!