ipv6 tunneled in ipv4 (protocol 41)

[LoopSupport]

Hi,

  What application in the Palo Alto Application database matches with IP protocol 41 (used for tunneling IPv6 in IPv4?

  When doing Source NAT, is IP protocol 41 NATed?

Thanks    

[ncampagna]

Hello,

We have several App-IDs that can be used to block IPv6-in-IPv4 tunneling:

1. Teredo

2. ISATAP

3. IPv6 - This will detect other forms of tunneling not identified by the above App-IDs.

These packets should be translated without modifying the IP protocol information.

Thanks,

Nick