Testing IPv6 using test-ipv6.com

[gfowler]

I'm unable to successfully complete test-ipv6.com (10 out of 10) without doing either 'Any' application or adding unknown-tcp as an application.

When I do just web-browsing, I get denies on 'unknown-tcp'.

Is there something different I can do without allowing wide open browsing for IPv6?   Is this a deficiency in the Applications list or the way web-browsing is detected over IPv6?

Is there a custom App-ID I can add?

Test completes 10/10:

Application: Any; Service: service-http

or

Application: web-browsing, unknown-tcp; Service: service-http

Test fails with 1/10:

Application: web-browsing; Service: application-default

Device is a 2020 running 4.1.7 standalone.

Anti-virus DB: 831-1143

Application and Threat DB: 327-1497

URL DB:  3936

[gfowler]

Installed Opera.  Passes the test.

Installed Safari.  Fails consistently.

I noticed the User-Agent header was longer on the failed tests.   I enabled the Developer feature on Safari.  Changed the User-Agent to Firefox 4 on Windows.

Safari succeeds when it impersonates Firefox.

[jvalentine]

I've had a chance to try this with PA5000 and also PA500, with 4.1.7 and 4.1.8.  Using Win7x64 with IE8, I can't make it fail.  It's either something about the PA2000 or something in your environment. I'll keep looking for a 2000 to try this out with.

[gfowler · Accepted solution]

Upgraded the 2020 to 5.0.0.

All browsers now pass the test 10/10.