IPv6 Support by Feature

Review which PAN-OSĀ® features support IPv6 traffic.
Use the following table to review PAN-OSĀ® features (listed by category) that support IPv6 traffic.
PAN-OS Feature
PAN-OS 8.1*
PAN-OS 9.1
PAN-OS 10.1
PAN-OS 10.2
PAN-OS 11.0
Security
WildFireĀ® Appliance
—
—
√
√
√
App-IDā„¢ and Firewalling in Layer 2 and Layer 3
√
√
√
√
√
User-IDā„¢
√
√
√
√
√
Content-IDā„¢
√
√
√
√
√
Block IPv6 in IPv4 Tunneling (via App-ID)
√
√
√
√
√
Zone Protection
√
√
√
√
√
Packet-Based Attack Protection
√
√
√
√
√
Reconnaissance Protection
√
√
√
√
√
URL Filtering
√
√
√
√
√
SSL Decryption
√
√
√
√
√
SSH Decryption
√
√
√
√
√
DoS Rulebase
√
√
√
√
√
IPv6 Access to PAN-DB
√
√
√
√
√
DNS Sinkhole
√
√
√
√
√
External Dynamic List (EDL)
√
√
√
√
√
Management & Panoramaā„¢
SSH Management (dedicated MGMT port)
√
√
√
√
√
Web Interface Management (dedicated MGMT port)
√
√
√
√
√
Interface Management (ping, telnet, ssh, http, https - all ports)
√
√
√
√
√
Device to Panorama SSL TCP Connection
√
√
√
√
√
Panorama HA Connection Between Peers
√
√
√
√
√
DNS
√
√
√
√
√
Dynamic DNS Support for Firewall Interfaces (DHCP-based interfaces)
—
√
√
√
√
RADIUS
√
√
√
√
√
LDAP
√
√
√
√
√
SYSLOG
√
√
√
√
√
SNMP
√
√
√
√
√
NTP
√
√
√
√
√
Device DNS (device only)
√
√
√
√
√
DNS Proxy
√
√
√
√
√
Reporting and Visibility in to IPv6
√
√
√
√
√
IPv6 Address Objects
√
√
√
√
√
IPv6 FQDN Address Objects
√
√
√
√
√
Networking
IPv6 Static Routes
√
√
√
√
√
PBF
√
√
√
√
√
PBF Next-Hop Monitor (v6 endpoint)
√
√
√
√
√
OSPFv3
√
√
√
√
√
MP-BGP
√
√
√
√
√
GRE Tunneling Support
—
√
√
√
√
ECMP
√
√
√
√
√
Dual Stack Support for L3 Interfaces
√
√
√
√
√
QoS Policy
√
√
√
√
√
QoS Marking
√
√
√
√
√
DSCP (session based)
√
√
√
√
√
Neighbor Discovery and Duplicate Address Detection
√
√
√
√
√
Tunnel Content Inspection
√
√
√
√
√
Virtual Wires
√
√
√
√
√
NPTv6 (stateless prefix translation)
√
√
√
√
√
NAT64 (IP-IPv6 protocol translation)
√
√
√
√
√
LLDP (Link Layer Discovery Protocol)
√
√
√
√
√
Bidirectional Forwarding Detection (BFD)
√
√
√
√
√
VPN
GlobalProtectā„¢
√
√
√
√
√
IKE/IPSec
√
√
√
√
√
IKEv2
√
√
√
√
√
IPv6 over IPv4 IPSec Tunnel
√
√
√
√
√
Large Scale VPN (LSVPN)
√
√
√
√
√
Host Dynamic Address Configuration
DHCPv6 Relay
√
√
√
√
√
DHCPv6 Client with Prefix Delegation (
Dataplane Interface only
)
—
—
—
—
√
SLAAC (Router Advertisements)
√
√
√
√
√
SLAAC (Router Preference)
√
√
√
√
√
SLAAC (RDNSS)
√
√
√
√
√
Device
High Availability (HA)—Active/Active
√
√
√
√
√
HA—Active/Passive
√
√
√
√
√
HA—IPv6 transport for HA1 & HA2
√
√
√
√
√
HA Path Monitoring (IPv6 Endpoint)
√
√
√
√
√
HA Clustering
—
—
√
√
√
User-ID
Map IPv6 Address to Users
√
√
√
√
√
Captive Portal for IPv6
√
√
√
√
√
Connection to User-ID Agents over IPv6
√
√
√
√
√
User-ID XML API for IPv6
√
√
√
√
√
Terminal Server Agent IPv6
√
√
√
√
√
* PAN-OS 8.1 is supported only on PA-200, PA-500, and PA-5000 Series firewalls and the M-100 appliance and only until each reaches its hardware end-of-life (EoL) date.

Recommended For You