for your Mobile Users—GlobalProtect deployments.
If your network uses IPv6 DNS servers to resolve internal domains,
you can also specify IPv6 addresses for primary and secondary DNS
servers, as shown in the following section.
Plan if you want to deploy IPv6 across your entire
Prisma Access deployment, or for only a certain number of compute locations.
Configure IPv6 availability for the regions where you
want to deploy IPv6.
for the locations for which you want to enable
All locations are associated to a compute location. If
locations in a compute location do not have IPv6 enabled, leave
that compute location deselected.
) If your internal DNS servers use
are reachable by IPv6 addresses, click the
rule or specify the default rule, and specify
IPv6 addresses for the
If you enter IPv6 addresses for DNS servers, you must also
have IPv6 addresses in your mobile user IP address pool.
can enter any combination of IPv4 or IPv6 addresses for primary
and secondary DNS servers. If you enter an IPv6 address for the
primary DNS server and an IPv4 address for the secondary DNS server,
and a DNS query is received from a compute location that does not
enabled, Prisma Access
uses the secondary DNS server because it uses an IPv4 address.
IPv4 addresses use A records, while IPv6 addresses
use AAAA records. Some DNS servers can perform AAAA DNS lookups
over IPv4 transport; therefore, you might not need a server with
an IPv6 IP address.