>
    Strata Copilot
    Native IPv6 Support for Prisma Access Remote Networks
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma Access
    3. Prisma Access Administration
    4. Prisma Access Advanced Deployments
    5. IPv6 Support
    6. Native IPv6 Support for Prisma Access Remote Networks
    Download PDF
    Prisma Access

    Native IPv6 Support for Prisma Access Remote Networks

    Table of Contents

    Native IPv6 Support for Prisma Access Remote Networks

    Enable native IPv6 support for Prisma Access remote networks.
    Where Can I Use This?What Do I Need?
    • Prisma Access (Panorama Managed)
    • Prisma Access license
    • Prisma Access 6.2
    To ensure native IPv6 compliance for public-facing IP addresses, Prisma SASE offers expanded IPv6 capabilities for underlay and overlay architectures. Public-facing IPs can operate in a native IPv6 environment, offering robust peering and tunneling options. Key capabilities of this feature include:
    • Federal compliance: Meets strict federal requirements for native IPv6 adoption across public-facing infrastructure.
    • Underlay IPv6 peering: Support for establishing native IPv6 peering connections in your infrastructure.
    • Overlay IPv6 Tunnels: Ability to enable and operate overlay IPv6 tunnels to secure your traffic.

    Configure Native IPv6 Support for Prisma Access Remote Networks

    Use this procedure to enable native IPv6 support for Prisma Access remote networks.
    1. Navigate to PanoramaCloud ServicesConfigurationService SetupSettings.
    2. Select the Settings gear.
    3. Click the Enable IPv6 checkbox to activate IPv6 capabilities across your Prisma Access deployment.
    4. Configure the IPv6 address with a subnet.
    5. Click Enable IPv6 WAN, and select OK.
    6. Navigate to PanoramaCloud ServicesConfigurationRemote NetworksOnboarding and select Add.
    7. Click the Enable IPv6 checkbox to activate IPv6 capabilities across your Prisma Access deployment.

    Configure an IPsec Tunnel

    1. Use the drop-down to add a new or modify an existing IPsec tunnel.
    2. Name the IPsec tunnel.
    3. Enable IPv6.

    Configure an IKE Gateway

    1. Use the drop-down to add a new or modify an existing IKE gateway.
    2. Name the IKE gateway.
    3. Enable IPv6.

    © 2026 Palo Alto Networks, Inc. All rights reserved.