Focus

Palo Alto Networks Compatibility Matrix

IPv6 Support by Feature

Table of Contents

IPv6 Support by Feature

Review which PAN-OS® features support IPv6 traffic.

Use the following table to review PAN-OS® features (listed by category) that support IPv6 traffic.

Security

Management & Panorama

Networking

VPN

Host Dynamic Address Configuration

Device

User-ID

PAN-OS Feature	PAN-OS 8.1*	PAN-OS 9.1	PAN-OS 10.1	PAN-OS 10.2	PAN-OS 11.0	PAN-OS 11.1
`Security`
WildFire® Appliance	—	—	√	√	√	√
App-ID™ and Firewalling in Layer 2 and Layer 3	√	√	√	√	√	√
User-ID™	√	√	√	√	√	√
Content-ID™	√	√	√	√	√	√
Block IPv6 in IPv4 Tunneling (via App-ID)	√	√	√	√	√	√
Zone Protection	√	√	√	√	√	√
Packet-Based Attack Protection	√	√	√	√	√	√
Reconnaissance Protection	√	√	√	√	√	√
URL Filtering	√	√	√	√	√	√
SSL Decryption	√	√	√	√	√	√
SSH Decryption	√	√	√	√	√	√
DoS Rulebase	√	√	√	√	√	√
IPv6 Access to PAN-DB	√	√	√	√	√	√
DNS Sinkhole	√	√	√	√	√	√
External Dynamic List (EDL)	√	√	√	√	√	√
`Management & Panorama™`
SSH Management (dedicated MGMT port)	√	√	√	√	√	√
Web Interface Management (dedicated MGMT port)	√	√	√	√	√	√
Interface Management (ping, telnet, ssh, http, https - all ports)	√	√	√	√	√	√
Device to Panorama SSL TCP Connection	√	√	√	√	√	√
Panorama HA Connection Between Peers	√	√	√	√	√	√
DNS	√	√	√	√	√	√
Dynamic DNS Support for Firewall Interfaces (DHCP-based interfaces)	—	√	√	√	√	√
RADIUS	√	√	√	√	√	√
LDAP	√	√	√	√	√	√
SYSLOG	√	√	√	√	√	√
SNMP	√	√	√	√	√	√
NTP	√	√	√	√	√	√
Device DNS (device only)	√	√	√	√	√	√
DNS Proxy	√	√	√	√	√	√
Reporting and Visibility in to IPv6	√	√	√	√	√	√
IPv6 Address Objects	√	√	√	√	√	√
IPv6 FQDN Address Objects	√	√	√	√	√	√
`SD-WAN`
SD-WAN IPv6 Basic Connectivity	—	—	—	—	√ (11.0.2 & later)	√
SD-WAN for NGFW IPv6 support	—	—	—	—	—	√
`Networking`
IPv6 Static Routes	√	√	√	√	√	√
PBF	√	√	√	√	√	√
PBF Next-Hop Monitor (v6 endpoint)	√	√	√	√	√	√
OSPFv3	√	√	√	√	√	√
MP-BGP	√	√	√	√	√	√
GRE Tunneling Support	—	√	√	√	√	√
ECMP	√	√	√	√	√	√
Dual Stack Support for L3 Interfaces	√	√	√	√	√	√
QoS Policy	√	√	√	√	√	√
QoS Marking	√	√	√	√	√	√
DSCP (session based)	√	√	√	√	√	√
Neighbor Discovery and Duplicate Address Detection	√	√	√	√	√	√
Tunnel Content Inspection	√	√	√	√	√	√
Virtual Wires	√	√	√	√	√	√
NPTv6 (stateless prefix translation)	√	√	√	√	√	√
NAT64 (IP-IPv6 protocol translation)	√	√	√	√	√	√
LLDP (Link Layer Discovery Protocol)	√	√	√	√	√	√
Bidirectional Forwarding Detection (BFD)	√	√	√	√	√	√
IPv6 PPPoE Client	—	—	—	—	—	√
Dynamic IPv6 Addressing on the Management Interface	—	—	—	—	—	√
`VPN`
GlobalProtect™	√	√	√	√	√	√
IKE/IPSec	√	√	√	√	√	√
IKEv2	√	√	√	√	√	√
IPv6 over IPv4 IPSec Tunnel	√	√	√	√	√	√
Large Scale VPN (LSVPN)	√	√	√	√	√	√
`Host Dynamic Address Configuration`
DHCPv6 Relay	√	√	√	√	√	√
DHCPv6 Client with Prefix Delegation (`Dataplane Interface only`)	—	—	—	—	√	√
SLAAC (Router Advertisements)	√	√	√	√	√	√
SLAAC (Router Preference)	√	√	√	√	√	√
SLAAC (RDNSS)	√	√	√	√	√	√
`Device`
High Availability (HA)—Active/Active	√	√	√	√	√	√
HA—Active/Passive	√	√	√	√	√	√
HA—IPv6 transport for HA1 & HA2	√	√	√	√	√	√
HA Path Monitoring (IPv6 Endpoint)	√	√	√	√	√	√
HA Clustering	—	—	√	√	√	√
`User-ID`
Map IPv6 Address to Users	√	√	√	√	√	√
Captive Portal for IPv6	√	√	√	√	√	√
Connection to User-ID Agents over IPv6	√	√	√	√	√	√
User-ID XML API for IPv6	√	√	√	√	√	√
Terminal Server Agent IPv6	√	√	√	√	√	√

IPv6 Support by Feature

Mobile Network Infrastructure Feature Support

Palo Alto Networks Compatibility Matrix

IPv6 Support by Feature

IPv6 Support by Feature

Recommended For You