You can configure NGFW interfaces to obtain their dynamic IPv6 addresses from ISPs by using DHCPv6, PPPoEv6, or cellular LTE/5G. However, an ISP (such as a cellular provider) might not provide a delegated IPv6 prefix that the firewall can use to provision LAN hosts with IPv6 prefixes. Also, an ISP may provide a delegated IPv6 prefix, but you might not want to expose your networking addresses externally.

Beginning with PAN-OS 11.1.5, you can use NPTv6 with dynamically assigned IPv6 address prefixes; this solution addresses both use cases. (NPTv6 already supported translation of statically configured IPv6 prefixes.)