We use PaloAlto GlobalProtect and have it running dual stack both as a gateway and for internal access – it works well.

 

Only limitation is that it doesn’t seem to pass ICMPv6 traceroute traffic over the tunnel, we haven’t logged this as a bug as it is not really a big issue.

 

 


Dan Kitchen 
CEO
razorblue | IT Solutions for Business

ddi: 0330 122 7143 | t: 0333 344 6 344 | w: razorblue.com  

[Razorblue Logo]

Legal and address information for all Razorblue Group companies can be found at razorblue.com/contact.

[ISO 9001 / ISO 27001 / Cyber Essentials]

From: ipv6-wg <ipv6-wg-bounces@ripe.net> On Behalf Of christian bretterhofer
Sent: 10 March 2019 21:09
To: ipv6-wg@ripe.net
Subject: [ipv6-wg] SSL VPN Clients

 

WARNING: This e-mail originated from outside the Razorblue Group corporate network

Sorry for a little be off topic query.

 

I am checking which VPN solutions are IPv6 compatible outside and inside the tunnel and can so transport with any IPv6/IPv4 connection IPv6/IPv4  internal to then tunnel  

 

Maybe somebody made such tests already and can point me to it.

What i found so far:

 

Citrix SSL VPN ( seems to have only partial support)

https://support.citrix.com/article/CTX211780 NetScaler Gateway VPN users are not able to resolve IPv4 DNS when their ISP has IPv6 enabled.

 

OpenVPN

https://community.openvpn.net/openvpn/wiki/IPv6 No complete example found yet.

 

Wireguard (LINUX only)

seems  to support it but missing other stuff like hostchecker