The Palo Alto Networks implementation of NPTv6 offers
the ability to filter packets to limit which packets are subject
to translation. Keep in mind that NPTv6 does not perform port translation.
There is no concept of Dynamic IP and Port (DIPP) translation because
NPTv6 translates IPv6 prefixes only. However, you can specify that only
packets for a certain service port undergo NPTv6 translation. To
do so,
Create an NPTv6 Policy that
specifies a
Service in the Original Packet.