Re: NG Firewalls & IPv6

2018-04-05 Thread Keith Stokes
I’ve been using PfSense @ home dual-stack on Cox for a year or two. As far as I can tell any IPv6 problems are Cox issues. On Apr 5, 2018, at 12:12 PM, Blake Hudson mailto:bl...@ispn.net>> wrote: I've used pfSense (BSD firewall) in a dual stack setup. Not all features are at parity with v4 (th

RE: NG Firewalls & IPv6

2018-04-05 Thread Robert Webb
configuration from their site you could send off list? Or on list if anyone else is interested. Thanks, Robert -Original Message- From: NANOG On Behalf Of Adam Kennedy via NANOG Sent: Thursday, April 5, 2018 11:46 AM To: NANOG list Subject: Re: NG Firewalls & IPv6 We've been usin

Re: NG Firewalls & IPv6

2018-04-05 Thread Blake Hudson
I've used pfSense (BSD firewall) in a dual stack setup. Not all features are at parity with v4 (the captive portal doesn't support v6, for example), but the core features of stateful firewall, DHCPv6, etc seemed to work without any fuss. Joe Klein wrote on 4/2/2018 5:58 PM: > All, > > At security

Re: NG Firewalls & IPv6

2018-04-05 Thread Adam Kennedy via NANOG
m> | w: razorblue.com > > > > Legal and address information for all Razorblue Group companies can be > found > > at www.razorblue.com/contact. > > > > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Joe Klein > > Sent: 02 April 2018 23:58 > &g

Re: NG Firewalls & IPv6

2018-04-04 Thread Chuck Anderson
boun...@nanog.org] On Behalf Of Joe Klein > Sent: 02 April 2018 23:58 > To: NANOG list > Subject: NG Firewalls & IPv6 > > WARNING: This e-mail originated from outside the Razorblue Group corporate > network > > All, > > At security and network tradeshows over th

RE: NG Firewalls & IPv6

2018-04-04 Thread Dan Kitchen
ue.com/contact. From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Joe Klein Sent: 02 April 2018 23:58 To: NANOG list Subject: NG Firewalls & IPv6 WARNING: This e-mail originated from outside the Razorblue Group corporate network All, At security and network tradeshows over the last 15 yea

RE: NG Firewalls & IPv6

2018-04-04 Thread Robert Webb
y via NANOG Sent: Wednesday, April 4, 2018 11:27 AM To: NANOG list Subject: Re: NG Firewalls & IPv6 We've deployed about a dozen Sophos SG and XG firewalls with IPv6 on WAN, LAN and VPN with great success. The XG is the firmware with the more modern appearance and a couple latest-gen

Re: NG Firewalls & IPv6

2018-04-04 Thread Adam Kennedy via NANOG
We've deployed about a dozen Sophos SG and XG firewalls with IPv6 on WAN, LAN and VPN with great success. The XG is the firmware with the more modern appearance and a couple latest-gen features. But the SG is just as "next gen" and still has good IPv6 capability. -- Adam Kennedy, Network & System

Re: NG Firewalls & IPv6

2018-04-03 Thread Jima
Hey Joe, I don't know how next-gen they'd be considered, but I've had reasonably good luck with Cisco ASA (v9+), and to a lesser degree Juniper ScreenOS (v6.3+). Modern-ish ASA does v6-only pretty well; ScreenOS has more v4-dependent nuances, that I've found. I do like the NAT64 support in ASA

Re: NG Firewalls & IPv6

2018-04-03 Thread Jean | ddostest.me via NANOG
n’t, but not a bad experience overall. Does v6 vpn’s great too. Haven’t delved into dynamic routing protocols on them so can’t speak to that. Happy to answer questions. David From: NANOG on behalf of Joe Klein Sent: Monday, April 2, 2018 6:58:14 PM To: NANOG lis

Re: NG Firewalls & IPv6

2018-04-03 Thread Saku Ytti
___ > From: NANOG on behalf of Joe Klein > > Sent: Monday, April 2, 2018 6:58:14 PM > To: NANOG list > Subject: NG Firewalls & IPv6 > > All, > > At security and network tradeshows over the last 15 years, I have asked > companies if their products supporte

Re: NG Firewalls & IPv6

2018-04-02 Thread David Hubbard
list Subject: NG Firewalls & IPv6 All, At security and network tradeshows over the last 15 years, I have asked companies if their products supported "IPv6". They all claimed they did, but were unable to verify any successful installations. Later they told me it was on their &quo

NG Firewalls & IPv6

2018-04-02 Thread Joe Klein
All, At security and network tradeshows over the last 15 years, I have asked companies if their products supported "IPv6". They all claimed they did, but were unable to verify any successful installations. Later they told me it was on their "Roadmap" but were unable to provide an estimated year, b