We use PaloAlto GlobalProtect and have it running dual stack both as a gateway and for internal access – it works well. Only limitation is that it doesn’t seem to pass ICMPv6 traceroute traffic over the tunnel, we haven’t logged this as a bug as it is not really a big issue. Dan Kitchen CEO razorblue | IT Solutions for Business ddi: 0330 122 7143<tel:0330%20122%207143> | t: 0333 344 6 344<tel:03333446344> | w: razorblue.com<https://www.razorblue.com> [[Razorblue Logo]]<https://www.razorblue.com> Legal and address information for all Razorblue Group companies can be found at razorblue.com/contact<http://www.razorblue.com/contact>. [[ISO 9001 / ISO 27001 / Cyber Essentials]]<http://> From: ipv6-wg <ipv6-wg-bounces@ripe.net> On Behalf Of christian bretterhofer Sent: 10 March 2019 21:09 To: ipv6-wg@ripe.net Subject: [ipv6-wg] SSL VPN Clients WARNING: This e-mail originated from outside the Razorblue Group corporate network Sorry for a little be off topic query. I am checking which VPN solutions are IPv6 compatible outside and inside the tunnel and can so transport with any IPv6/IPv4 connection IPv6/IPv4 internal to then tunnel Maybe somebody made such tests already and can point me to it. What i found so far: Citrix SSL VPN ( seems to have only partial support) https://support.citrix.com/article/CTX233563<https://support.citrix.com/article/CTX233563> https://www.citrix.com/blogs/2010/07/13/are-citrix-products-ipv6-ready/<https://www.citrix.com/blogs/2010/07/13/are-citrix-products-ipv6-ready/> so IPv6 / IPv6 not yet supported https://support.citrix.com/article/CTX211780<https://support.citrix.com/article/CTX211780> NetScaler Gateway VPN users are not able to resolve IPv4 DNS when their ISP has IPv6 enabled. OpenVPN https://community.openvpn.net/openvpn/wiki/IPv6<https://community.openvpn.net/openvpn/wiki/IPv6> No complete example found yet. Wireguard (LINUX only) seems to support it but missing other stuff like hostchecker Cisco SSL VPN https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-3s/sec-conn-sslvpn-xe-3s-book/sec-conn-sslvpn-ipv6-ssl-supp.pdf<https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-3s/sec-conn-sslvpn-xe-3s-book/sec-conn-sslvpn-ipv6-ssl-supp.pdf> IPv6 Support and Limitations for Pulse Connect Secure Features https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/IPv6%20Support%20and%20Limitations.htm<https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/IPv6%20Support%20and%20Limitations.htm> Microsoft Direct access (win7/win10) and new Always on VPN (Win10 only) https://directaccess.richardhicks.com/2018/02/05/what-is-the-difference-between-directaccess-and-always-on-vpn/<https://directaccess.richardhicks.com/2018/02/05/what-is-the-difference-between-directaccess-and-always-on-vpn/> https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-map-da<https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-map-da> -- --- best regards Christian Bretterhofer
