Filtering IPv6 extension headers

[igor_mamuzic]

Can we use Palo Alto fw for filtering IPv6 Extension headers such as Destination option, for example?

Regards,

Igor

[sturla]

Hi Igor!

I asked the very same question in a webcast on DoS prevention. And here is the reply i got:

Extension header filtration will be supported in the v5 code release. As your question implies, it will be supported in the Zone Protection Profile Settings.

Whether this means that we can use it in security policy rules or not I don't know.

Regards

Sturla