Disable IPv6 on Linux Devices (Optional)
Focus
Focus
Prisma Agent

Disable IPv6 on Linux Devices (Optional)

Table of Contents

Disable IPv6 on Linux Devices (Optional)

Disable IPv6 at the system level on your Linux device before installing Prisma Agent to reduce exposure from IPv6-based threats.
Where Can I Use This?What Do I Need?
  • Prisma Agent
  • Linux endpoints
Prisma Agent for Linux 26.2.2 and later automatically handles IPv6 traffic using selective blocking, so system-wide IPv6 disabling is no longer required. If your environment includes legacy applications that don't support automatic IPv4 fallback, you can still disable IPv6 on the device to prevent application-level delays. Review the IPv6 Traffic Handling for Prisma Agent on Linux documentation before deciding whether to disable IPv6.
  1. Disable IPv6 at the system level using any available methods such as GRUB.
    1. Edit the GRUB configuration file:
      sudo nano /etc/default/grub
    2. Add or modify the GRUB_CMDLINE_LINUX parameter to include ipv6.disable=1:
      GRUB_CMDLINE_LINUX="quiet splash ipv6.disable=1"
    3. Update the GRUB configuration:
      • For Ubuntu:
        sudo update-grub
      • For Arch Linux or Fedora:
        sudo grub-mkconfig -o /boot/grub/grub.cfg
    4. Reboot the system:
      sudo reboot
    5. Verify that IPv6 is disabled:
      cat /proc/sys/net/ipv6/conf/all/disable_ipv6
      The command should return 1 if IPv6 is successfully disabled.
  2. The Mozilla Firefox browser also requires disabling IPv6 for DNS queries. To disable DNS over HTTPS (DoH) in Firefox:
    1. Open Firefox and enter about:config in the address bar.
    2. Search for network.dns.disableIPv6.
    3. Set the value to true.