Tuesday, February 1, 2011

Are your firewalls ready for IPv6?

I have to admit, over the last few years I have become a bit immune to all the declarations that this year was finally going to be the year that the Internet ran out of IPv4 addresses. While I still think this issue is getting sensationalized by the media, http://bit.ly/eLV7ci, the reality is that 2011 will likely mark the first year where enterprises really have to start planning for how they are going to support IPv6.

Even though it may be a little while before your enterprise is running a dual stack network with both native IPv4 and native IPv6 it’s probably time to start planning for when that day arrives. One notable change driven by IPv6 will be how network and security administrators think about firewall functions and network boundaries.

For example, one of the goals of IPv6 is to have a large enough IP address space that Network Address Translation (NAT) is no longer necessary. However many security administrators view NAT as providing useful hiding of their internal IP address schemes. I predict there will be a lot of interesting discussions about how best to secure IPv6 networks as it gets more widespread and mainstream adoption.

So, why am I posting about IPv6 you ask? One of the features of Firewall Builder is that it has built-in support for creating IPv6 objects and using those objects in your rules. This helps reduce the pain of deploying and supporting IPv6 firewalls. As noted IPv6 network architect pointed out to me, using a tool like Firewall Builder where objects are used in rules instead of straight IP addresses becomes even more critical with IPv6. How many times do you have to type 2001:0db8:85a3:::8a2e:0370:7334 before you make a typo??

Right now Firewall Builder supports IPv6 rules generation for Linux ip6tables, BSD pf, Cisco router access lists and ipfw, however I expect that as we see more of our users adopting IPv6 that we will add support for other platforms like Cisco ASA and PIX firewalls in the future.

Are you already using IPv6 or starting to plan for it? Let us know in the comments how you see IPv6 affecting your firewall management plans.

20 comments:

Simon said...

As currently IPv4 is still fully functional I have yet to change our networks for compatibility. In our network however most of the hardware is compatible with IPv6 although it will require hard modding on 2 of them (most probably a replacement), the dd-wrt wrt54gs systems will be the easiest to maintain most probably.

erwicker said...

I totally agree with you:)

portable wireless router

MaryJohn said...

good post

MaryJohn said...

An Internet Protocol address (IP address) is a numerical label assigned to each connection.The computer uses this to establish the connection.Two versions of the IP are in use: IP Version 4 and IP Version 6.In IPv4 an address consists of 32 bits and the IP v6 uses from 32 to 128 bits.I have a IPv 4 when I checked through Ip-details.com

Zheng junxai5 said...

zhengjx20160818
oakley vault
polo ralph lauren
michael kors outlet clearance
louboutin shoes
true religion jeans cheap
kate spade handbags
ralph lauren outlet
toms wedges
polo ralph lauren
jordan femme pas cher
cheap jordans
true religion outlet online
ugg boots
retro jordans 13
coach factory outlet online
rolex watches outlet
asics running shoes
coach outlet store online
louis vuitton outlet
michael kors outlet
toms wedges
michael kors bags
christian louboutin sneakers
mbt shoes
moncler coat
true religion uk
adidas yeezy 350
christian louboutin sale
canada goose sale
michael kors outlet online
louis vuitton handbags
cheap rolex watches
ralph lauren
michael kors outlet
fitflops
gucci outlet
air jordan 11
michael kors outlet
nike tn pas cher
true religion jeans

chenmeinv0 said...

replica watches
ray ban sunglasses
hollister jeans
ugg slippers
discount ugg boots
oakley vault
ugg boot uk
louis vuitton outlet stores
ugg boots on sale
the north face outlet
michael kors outlet clearance
ugg boots
adidas superstar shoes
fitflop shoes
louis vuitton outlet online
pandora jewelry
cheap oakley sunglasses
oakley sunglasses
fitflops shoes
curry 3 shoes
ugg boots outlet
seahawks jerseys
mbt sandals
celtics jerseys
cheap uggs
coach outlet
hogan sito ufficiale
uggs sale
burberry handbags
chicago bulls jerseys
coach outlet
replica rolex watches
nike roshe run shoes
michael kors outlet store
louis vuitton belt
knicks jerseys
patriots jerseys
uggs on sale
coach outlet store online clearances
adidas trainers uk
2016.10.31xukaimin

Jian Zhuo said...

louboutin
hollister kids
nike air max
michael kors outlet
canada goose uk
ugg outlet
michael kors outlet online
ysl outlet online
coach factory outlet
ray ban sunglasses
2016126

Jian Zhuo said...

louboutin
hollister kids
nike air max
michael kors outlet
canada goose uk
ugg outlet
michael kors outlet online
ysl outlet online
coach factory outlet
ray ban sunglasses
2016126

davison said...

It is very useful information about the firewall. I appreciate your efforts that you have made to create this great post. Keep this great work up. plumber fort collins

chenlina said...

vans shoes
supra shoes
vans shoes
abercrombie kids
coach outlet
christian louboutin
coach factory outlet
adidas yeezy
ralph lauren uk
polo ralph lauren
chenlina20170506

agario games said...

Interesting article! Thank you for sharing them! I hope you will continue to have similar posts to share with everyone! I believe a lot of people will be surprised to read this article!
abcya

Candy Sim said...

All the best blogs that is very useful for keeping me share the ideas of the future as well this is really what I was looking for, and I am very happy to come here. Thank you very much
animal jam codes | five nights at freddy's 4 | hotmail login

sakura sakuri said...

KUNJUNGILAH:

CARA MENGGUGURKAN KANDUNGAN

alma safitri said...

obat pelancar haid
obat penggugur kandungan
obat datang bulan
obat cytotec
obat gugurin janin
obat aborsi
jual obat pelancar haid
jual obat penggugur kandungan
jual obat cytotec
harga obat cytotec
harga obat pelancar haid
harga obat aborsi

xuxu Luerg said...

Thank you for sharing

Nike Air Force 1 Shoes
Nike Air Huarache Shoes
Nike Air Zoom Shoes
Nike Rose Run Shoes
Nike Free Run Shoes
Nike Air Presto Shoes


Adidas Ultra Boost
Adidas Yeezy Boost 350 V2 Shoes
Adidas NMD Boost Shoes
Adidas Springblade Shoes
Adidas EQT Shoes

qqq said...

mont blanc
rayban
ugg outlet
louis vuitton handbags outlet
coach factory outlet
polo ralph lauren
cheap oakley sunglasses
mont blanc
toms shoes
clarks outlet
170715yueqin

raybanoutlet001 said...

nike outlet
louboutin shoes
polo ralph lauren
michael kors outlet
eagles jerseys
michael kors uk
nike air force 1
cheap nfl jerseys
coach bags
ugg boots

juegos friv said...

wir danken Ihnen fu das Interesse an unseren Produkten und hoffe Friv4school 2018, Friv 2018, Play Friv4school Games Gry Friv 2, Gry Online, FRIV 2 Gry Friv 5, Gry Online, Darmowe Friv Online Wir danken Ihnen Gry Friv, Gry Online, Darmowe Friv Online Juegos Friv 100, Juegos Gratis, FRIV 100 Juegos Friv 1000, Juegos Gratis, FRIV 1000 dass Sie diese Hoffnung mit uns teilen und diesen Schritt auf dem Pilgerweg des Vertrauens Juegos Friv 5, Juegos Gratis, FRIV 5 Juegos De Friv 2, Juegos Gratis, FRIV 2 Juegos Friv 250, Juegos Gratis, Friv 250 Juegos Yepi, Juegos Gratis, Yepi Online mit uns gegangen sind.

قمم التميز said...

شركة عزل اسطح
خدمات عزل الاسطح من الخدمات التى فى حاجة الية فى المكان فاذا اراد ان تقوم باعمال العزل لاى اسطح فى المصانع – المنازل – الفلل ... وغيرها وتبحث عن افضل الخدمات التى تساعد فى الوصول الى افضل ما تتمنى ان ترى علية النتائج فعليك ان تتعاون مع شركة قمم التميز التى تحقق اعلى مستوى من العزل بالاعتماد على افضل المواد المخصصة فى القيام باعمال العزل والتى استطاعت ان تتاكد ان اعمال العزل التى تتم بالخيش المقطرن والسيلتون من افضل الخدمات المثالية المميزة التى تحقق اعلى مستوى من العزل دون ان يؤدى الى ظهور اى عيب فى اعمال العزل . شركة عزل اسطح بخميس مشيط
لا تكتفى شركة قمم التميز بالقيام باعمال العزل فى منطقة معينة بل تسعى الى الوصول الى اى مكان فى شرق الرياض – جنوب الرياض – غرب الرياض – وسط الرياض من اجل ان تحقق خدمات العزل لجميع عملاء الشركة الكرام . شركة عزل خزانات بخميس مشيط
تهتم شركة عزل اسطح بالقيام باعمال العزل الحرارى من خلال الاعتماد على افضل الطرق المثالية وافضل الخدمات المميزة فى القيام باعمال العزل بالاضافة الى ان الشركة تهتم باعمال الكشف الدورى من فترة الى اخرى من اجل ان يتم التحقق ان اعمال العزل تمت كما هو مطلوب فى المكان . شركة عزل فوم بخميس مشيط
العزل الحرارى يساعد فى حماية الاسطح من التعرض الى ارتفاع فى درجة الحرارة وتسربها عبر الجدران فى فصل الصيف بالاضافة الى التعرض الى التصدعات وعوامل المناخية المختلفة التى تتعرض الية فى فصل الصيف نتيجة لشدة الحرارة التى تظهر التشوهات فى المبانى ، بالاضافة الى ان لدينا خدمات العزل المائى من خلال الاعتماد على خدمات العزل المائية التى تتم من خلال افضل خدمات متواجدة والتى تسعى الى تحقيق افضل مستوى من الخدمة والعزل بالفوم ايضا من اهم الطرق الحديثة التى استخدامت فى العديد من الدول الاوربية لانه يساعد فى حماية المبنى من التعرض الى الحرارة المرتفعه او التعرض الى التسربات للمياة والحفاظ على المبنى من اى مشاكل وعوامل مناخية ، فاعمال العزل للفوم اختصار لكل طرق العزل والتى تساعد فى الحفاظ على المبنى .
كشف تسربات المياه
شركة كشف تسربات المياه بخميس مشيط
تسربات المياه مشكلة تؤدى الى التعرض الى عدد من المشكلات الاخرى ، فالاهمال فى تسربات المياه يؤدى الى التعرض الى الكثير من المشكلات التى نحن فى غنى عنة فاذا تعرض الى التسربات وتعرضت الى ظهور عدد من المشكلات الاخرى مثل سقوط الدهانات والتعرض الى مشاكل الرطوبة فعليك ان تتواصل وتتعاقد مع شركة قمم التميز المخصصه فى اعمال الكشف عن تسربات المياه

Teresa Hamilton said...

Thank you for sharing the information! It's good to find!
instagram online