We run PaloAlto dual stack with no problems at all, that’s full dynamic routing with OSPF and BGP, web filtering, IPS, VPN access using GlobalProtect, etc. I must admit GlobalProtect IPv6 support was only introduced in PanOS 8 which was a little late in my opinion – but it was delivered and works. Dan Kitchen Managing Director razorblue | IT Solutions for Business ddi:0330 122 7143 | t: 0333 344 6 344 | e: dkitchen@razorblue.com<mailto:dkitchen@razorblue.com> | w: razorblue.com Legal and address information for all Razorblue Group companies can be found at www.razorblue.com/contact. From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Joe Klein Sent: 02 April 2018 23:58 To: NANOG list <nanog@nanog.org> Subject: NG Firewalls & IPv6 WARNING: This e-mail originated from outside the Razorblue Group corporate network All, At security and network tradeshows over the last 15 years, I have asked companies if their products supported "IPv6". They all claimed they did, but were unable to verify any successful installations. Later they told me it was on their "Roadmap" but were unable to provide an estimated year, because it was a trade secret. Starting this last year at BlackHat US, I again visited every product booth, asking if their products supported dual-stack or IPv6 only operations. Receiving only the same unsupported answers, I decided to focus on one product category. To the gurus of the NANOG community, What are your experiences with installing and managing Next Generations firewalls? Do they support IPv6 only environments? Details? Stories? If you prefer not to disparage those poor product companies, please contact me off the list. Thanks, Joe Klein "inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene 1) PGP Fingerprint: 295E 2691 F377 C87D 2841 00C1 4174 FEDF 8ECF 0CC8