>
    Strata Copilot
    IPv6 Support by Feature
    Focus
    Download PDF
    Focus
    1. Home
    2. Compatibility Matrix
    3. IPv6 Support by Feature
    Download PDF
    Compatibility Matrix

    IPv6 Support by Feature

    Table of Contents

    IPv6 Support by Feature

    Use the following table to review PAN-OS® features (listed by category) that support IPv6 traffic.
    PAN-OS Feature
    PAN-OS 9.1
    PAN-OS 10.1
    PAN-OS 10.2
    PAN-OS 11.0
    PAN-OS 11.1
    PAN-OS 11.2
    PAN-OS 12.1.21
    Security
    WildFire® Appliance
    —
    √
    √
    √
    √
    √
    √
    App-ID™ and Firewalling in Layer 2 and Layer 3
    √
    √
    √
    √
    √
    √
    √
    User-ID™
    √
    √
    √
    √
    √
    √
    √
    Content-ID™
    √
    √
    √
    √
    √
    √
    √
    Block IPv6 in IPv4 Tunneling (via App-ID)
    √
    √
    √
    √
    √
    √
    √
    Zone Protection
    √
    √
    √
    √
    √
    √
    √
    Packet-Based Attack Protection
    √
    √
    √
    √
    √
    √
    √
    Reconnaissance Protection
    √
    √
    √
    √
    √
    √
    √
    URL Filtering
    √
    √
    √
    √
    √
    √
    √
    SSL Decryption
    √
    √
    √
    √
    √
    √
    √
    SSH Decryption
    √
    √
    √
    √
    √
    √
    √
    DoS Rulebase
    √
    √
    √
    √
    √
    √
    √
    IPv6 Access to PAN-DB
    √
    √
    √
    √
    √
    √
    √
    DNS Sinkhole
    √
    √
    √
    √
    √
    √
    √
    External Dynamic List (EDL)
    √
    √
    √
    √
    √
    √
    √
    Management & Panorama™
    SSH Management (dedicated MGMT port)
    √
    √
    √
    √
    √
    √
    √
    Web Interface Management (dedicated MGMT port)
    √
    √
    √
    √
    √
    √
    √
    Interface Management (ping, telnet, ssh, http, https - all ports)
    √
    √
    √
    √
    √
    √
    √
    Device to Panorama SSL TCP Connection
    √
    √
    √
    √
    √
    √
    √
    DNS
    √
    √
    √
    √
    √
    √
    √
    Dynamic DNS Support for Firewall Interfaces (DHCP-based interfaces)
    √
    √
    √
    √
    √
    √
    √
    RADIUS
    √
    √
    √
    √
    √
    √
    √
    LDAP
    √
    √
    √
    √
    √
    √
    √
    SYSLOG
    √
    √
    √
    √
    √
    √
    √
    SNMP
    √
    √
    √
    √
    √
    √
    √
    NTP
    √
    √
    √
    √
    √
    √
    √
    Device DNS (device only)
    √
    √
    √
    √
    √
    √
    √
    DNS Proxy
    √
    √
    √
    √
    √
    √
    √
    Reporting and Visibility in to IPv6
    √
    √
    √
    √
    √
    √
    √
    IPv6 Address Objects
    √
    √
    √
    √
    √
    √
    √
    IPv6 FQDN Address Objects
    √
    √
    √
    √
    √
    √
    √
    SD-WAN
    SD-WAN IPv6 Basic Connectivity
    —
    —
    —
    √
    (11.0.2 & later)
    √
    √
    √
    SD-WAN for NGFW IPv6 support
    —
    —
    —
    —
    √
    √
    √
    Networking
    IPv6 Static Routes
    √
    √
    √
    √
    √
    √
    √
    PBF
    √
    √
    √
    √
    √
    √
    √
    PBF Next-Hop Monitor (v6 endpoint)
    √
    √
    √
    √
    √
    √
    √
    OSPFv3
    √
    √
    √
    √
    √
    √
    √
    MP-BGP
    √
    √
    √
    √
    √
    √
    √
    GRE Tunneling Support
    √
    √
    √
    √
    √
    √
    √
    ECMP
    √
    √
    √
    √
    √
    √
    √
    Dual Stack Support for L3 Interfaces
    √
    √
    √
    √
    √
    √
    √
    QoS Policy
    √
    √
    √
    √
    √
    √
    √
    QoS Marking
    √
    √
    √
    √
    √
    √
    √
    DSCP (session based)
    √
    √
    √
    √
    √
    √
    √
    Neighbor Discovery and Duplicate Address Detection
    √
    √
    √
    √
    √
    √
    √
    Tunnel Content Inspection
    √
    √
    √
    √
    √
    √
    √
    Virtual Wires
    √
    √
    √
    √
    √
    √
    √
    NPTv6 (stateless prefix translation)
    √
    √
    √
    √
    √
    √
    √
    NAT64 (IP-IPv6 protocol translation)
    √
    √
    √
    √
    √
    √
    √
    LLDP (Link Layer Discovery Protocol)
    √
    √
    √
    √
    √
    √
    √
    Bidirectional Forwarding Detection (BFD)
    √
    √
    √
    √
    √
    √
    √
    IPv6 PPPoE Client
    —
    —
    —
    —
    √
    √
    √
    Dynamic IPv6 Addressing on the Management Interface
    —
    —
    —
    —
    √
    √
    √
    VPN
    GlobalProtect™
    √
    √
    √
    √
    √
    √
    √
    IKE/IPSec
    √
    √
    √
    √
    √
    √
    √
    IKEv2
    √
    √
    √
    √
    √
    √
    √
    IPv6 over IPv4 IPSec Tunnel
    √
    √
    √
    √
    √
    √
    √
    Large Scale VPN (LSVPN)
    √
    √
    √
    √
    √
    √
    √
    Host Dynamic Address Configuration
    DHCPv6 Relay
    √
    √
    √
    √
    √
    √
    √
    DHCPv6 Client with Prefix Delegation (Dataplane Interface only)
    —
    —
    —
    √
    √
    √
    √
    SLAAC (Router Advertisements)
    √
    √
    √
    √
    √
    √
    √
    SLAAC (Router Preference)
    √
    √
    √
    √
    √
    √
    √
    SLAAC (RDNSS)
    √
    √
    √
    √
    √
    √
    √
    Device
    High Availability (HA)—Active/Active
    √
    √
    √
    √
    √
    √
    √
    HA—Active/Passive
    √
    √
    √
    √
    √
    √
    √
    HA—IPv6 transport for HA1 & HA2
    √
    √
    √
    √
    √
    √
    √
    HA Path Monitoring (IPv6 Endpoint)
    √
    √
    √
    √
    √
    √
    √
    HA Clustering
    —
    √
    √
    √
    √
    √
    √
    User-ID
    Map IPv6 Address to Users
    √
    √
    √
    √
    √
    √
    √
    Captive Portal for IPv6
    √
    √
    √
    √
    √
    √
    √
    Connection to User-ID Agents over IPv6
    √
    √
    √
    √
    √
    √
    √
    User-ID XML API for IPv6
    √
    √
    √
    √
    √
    √
    √
    Terminal Server Agent IPv6
    √
    √
    √
    √
    √
    √
    √
    1 The support for PAN-OS 12.x begins at version 12.1.2.

    © 2026 Palo Alto Networks, Inc. All rights reserved.