[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
NG Firewalls & IPv6
- Subject: NG Firewalls & IPv6
- From: dhubbard at dino.hostasaurus.com (David Hubbard)
- Date: Tue, 3 Apr 2018 00:28:11 +0000
- In-reply-to: <CAP032[email protected]>
- References: <CAP032[email protected]>
Iâ??ve been doing dual stack through Fortinet products for many years without issue. Well, no issue from a technical perspective. Sometimes you have to dig for a bit to find the equivalent v6 CLI commands, and occasionally thereâ??s GUI stuff missing that requires CLI where the v4 equivalent didnâ??t, but not a bad experience overall. Does v6 vpnâ??s great too. Havenâ??t delved into dynamic routing protocols on them so canâ??t speak to that. Happy to answer questions.
From: NANOG <nanog-bounces at nanog.org> on behalf of Joe Klein <jsklein at gmail.com>
Sent: Monday, April 2, 2018 6:58:14 PM
To: NANOG list
Subject: NG Firewalls & IPv6
At security and network tradeshows over the last 15 years, I have asked
companies if their products supported "IPv6". They all claimed they did,
but were unable to verify any successful installations. Later they told me
it was on their "Roadmap" but were unable to provide an estimated year,
because it was a trade secret.
Starting this last year at BlackHat US, I again visited every product
booth, asking if their products supported dual-stack or IPv6 only
operations. Receiving only the same unsupported answers, I decided to focus
on one product category.
To the gurus of the NANOG community, What are your experiences with
installing and managing Next Generations firewalls? Do they support IPv6
only environments? Details? Stories?
If you prefer not to disparage those poor product companies, please contact
me off the list.
"inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1)
PGP Fingerprint: 295E 2691 F377 C87D 2841 00C1 4174 FEDF 8ECF 0CC8