IPv6 Support by Feature
Focus
Focus
Compatibility Matrix

IPv6 Support by Feature

Table of Contents

IPv6 Support by Feature

Use the following table to review PAN-OS® features (listed by category) that support IPv6 traffic.
PAN-OS Feature
PAN-OS 9.1
PAN-OS 10.1
PAN-OS 10.2
PAN-OS 11.0
PAN-OS 11.1
PAN-OS 11.2
Security
WildFire® Appliance
App-ID™ and Firewalling in Layer 2 and Layer 3
User-ID™
Content-ID™
Block IPv6 in IPv4 Tunneling (via App-ID)
Zone Protection
Packet-Based Attack Protection
Reconnaissance Protection
URL Filtering
SSL Decryption
SSH Decryption
DoS Rulebase
IPv6 Access to PAN-DB
DNS Sinkhole
External Dynamic List (EDL)
Management & Panorama™
SSH Management (dedicated MGMT port)
Web Interface Management (dedicated MGMT port)
Interface Management (ping, telnet, ssh, http, https - all ports)
Device to Panorama SSL TCP Connection
Panorama HA Connection Between Peers
DNS
Dynamic DNS Support for Firewall Interfaces (DHCP-based interfaces)
RADIUS
LDAP
SYSLOG
SNMP
NTP
Device DNS (device only)
DNS Proxy
Reporting and Visibility in to IPv6
IPv6 Address Objects
IPv6 FQDN Address Objects
SD-WAN
SD-WAN IPv6 Basic Connectivity
(11.0.2 & later)
SD-WAN for NGFW IPv6 support
Networking
IPv6 Static Routes
PBF
PBF Next-Hop Monitor (v6 endpoint)
OSPFv3
MP-BGP
GRE Tunneling Support
ECMP
Dual Stack Support for L3 Interfaces
QoS Policy
QoS Marking
DSCP (session based)
Neighbor Discovery and Duplicate Address Detection
Tunnel Content Inspection
Virtual Wires
NPTv6 (stateless prefix translation)
NAT64 (IP-IPv6 protocol translation)
LLDP (Link Layer Discovery Protocol)
Bidirectional Forwarding Detection (BFD)
IPv6 PPPoE Client
Dynamic IPv6 Addressing on the Management Interface
VPN
GlobalProtect™
IKE/IPSec
IKEv2
IPv6 over IPv4 IPSec Tunnel
Large Scale VPN (LSVPN)
Host Dynamic Address Configuration
DHCPv6 Relay
DHCPv6 Client with Prefix Delegation (Dataplane Interface only)
SLAAC (Router Advertisements)
SLAAC (Router Preference)
SLAAC (RDNSS)
Device
High Availability (HA)—Active/Active
HA—Active/Passive
HA—IPv6 transport for HA1 & HA2
HA Path Monitoring (IPv6 Endpoint)
HA Clustering
User-ID
Map IPv6 Address to Users
Captive Portal for IPv6
Connection to User-ID Agents over IPv6
User-ID XML API for IPv6
Terminal Server Agent IPv6