<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head>  <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <style type="text/css">P.ImprintUniqueID { MARGIN: 0cm 0cm 0pt } LI.ImprintUniqueID { MARGIN: 0cm 0cm 0pt } DIV.ImprintUniqueID { MARGIN: 0cm 0cm 0pt } TABLE.ImprintUniqueIDTable { MARGIN: 0cm 0cm 0pt } DIV.Section1 { page: Section1 } .email { font-family: Arial; color: #555555; font-size: 11pt; } .email A { TEXT-DECORATION: none !important; COLOR: #0098cd !important } </style> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-GB" link="blue" vlink="purple"> <span class="email"> <div class="WordSection1"> <p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:EN-US">We use PaloAlto GlobalProtect and have it running dual stack both as a gateway and for internal access – it works well.<o:p></o:p></span></p> <p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:EN-US"><o:p> </o:p></span></p> <p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:EN-US">Only limitation is that it doesn’t seem to pass ICMPv6 traceroute traffic over the tunnel, we haven’t logged this as a bug as it is not really a big issue.<o:p></o:p></span></p> <p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:EN-US"><o:p> </o:p></span></p> <p class="MsoNormal"><span style="font-family:"Arial",sans-serif;color:#595959;mso-fareast-language:EN-US"><o:p> </o:p></span></p> <div></div> </div> <br> <font style="FONT-SIZE: 12pt; FONT-FAMILY: Arial; FONT-WEIGHT: bold; COLOR: #0098cd"><font style="font-family:Arial;font-size:12pt;color:#0098CD;font-weight:bold;">Dan Kitchen</font> <br> </font><font style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; COLOR: #555555"><font style="font-family:Arial;font-size:10pt;color:#555555;">CEO</font> <br> razorblue | IT Solutions for Business <br> <br> ddi: <a style="FONT-SIZE: 10pt; TEXT-DECORATION: none !important; FONT-FAMILY: Arial; FONT-WEIGHT: bold; COLOR: #0098cd !important" href="tel:0330 122 7143"> 0330 122 7143</a> | t: <a style="FONT-SIZE: 10pt; TEXT-DECORATION: none !important; FONT-FAMILY: Arial; FONT-WEIGHT: bold; COLOR: #0098cd !important" href="tel:03333446344"> 0333 344 6 344</a> <font style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; COLOR: #555555"> | w: <a style="FONT-SIZE: 10pt; TEXT-DECORATION: none !important; FONT-FAMILY: Arial; FONT-WEIGHT: bold; COLOR: #0098cd !important" href="https://www.razorblue.com"> razorblue.com</a> </font> <div class="WordSection1"> <div></div> </div> </font></span><br> <a href="https://www.razorblue.com" target=""><img width="680" height="128" style="border: 0px Solid ; " src="cid:image1496fe.PNG@f61a5ba5.42a64034" alt="[Razorblue Logo]"></a><span style="FONT-WEIGHT: 400"><font color="#666666" size="2" face="Arial"><br> <br> Legal and address information for all Razorblue Group companies can be found at <a href="http://www.razorblue.com/contact" target="_blank"> <font color="#666666">razorblue.com/contact</font></a>.<br> <br> </font></span><a href="http://" target=""><img width="449" height="78" style="border: 0px Solid ; " src="cid:image828e7b.PNG@32362a2d.4a986e56" alt="[ISO 9001 / ISO 27001 / Cyber Essentials]"></a><br> <br> <span class="email"><font style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; COLOR: #555555"> <div class="WordSection1"> <div> <div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm"> <p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> ipv6-wg <ipv6-wg-bounces@ripe.net> <b>On Behalf Of </b>christian bretterhofer<br> <b>Sent:</b> 10 March 2019 21:09<br> <b>To:</b> ipv6-wg@ripe.net<br> <b>Subject:</b> [ipv6-wg] SSL VPN Clients<o:p></o:p></span></p> </div> </div> <p class="MsoNormal"><o:p> </o:p></p> <div style="border:none;border-top:solid white 1.0pt;padding:3.0pt 0cm 0cm 0cm"> <p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">WARNING: This e-mail originated from outside the Razorblue Group corporate network</span> <o:p></o:p></p> <div> <div> <div> <div> <div> <div> <div> <div> <div> <p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:#1F497D">Sorry for a little be off topic query.</span><o:p></o:p></p> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:#1F497D">I am checking which VPN solutions are IPv6 compatible outside and inside the tunnel and can so transport with any IPv6/IPv4 connection IPv6/IPv4</span> <span style="font-family:"Times New Roman",serif;color:#1F497D"> internal to then tunnel </span> <o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Maybe somebody made such tests already and can point me to it.<o:p></o:p></p> </div> <div> <p class="MsoNormal">What i found so far:<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Citrix SSL VPN ( seems to have only partial support)<o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="https://support.citrix.com/article/CTX233563">https://support.citrix.com/article/CTX233563</a><o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="https://www.citrix.com/blogs/2010/07/13/are-citrix-products-ipv6-ready/">https://www.citrix.com/blogs/2010/07/13/are-citrix-products-ipv6-ready/</a> so IPv6 / IPv6 not yet supported<o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="https://support.citrix.com/article/CTX211780">https://support.citrix.com/article/CTX211780</a> <span style="font-family:"Helvetica Neue";color:#333333">NetScaler Gateway VPN users are not able to resolve IPv4 DNS when their ISP has IPv6 enabled. </span><o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">OpenVPN<o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="https://community.openvpn.net/openvpn/wiki/IPv6">https://community.openvpn.net/openvpn/wiki/IPv6</a> No complete example found yet.<o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal">Wireguard (LINUX only)<o:p></o:p></p> </div> <div> <p class="MsoNormal">seems to support it but missing other stuff like hostchecker <o:p></o:p></p> </div> <div> <p class="MsoNormal"><br clear="all"> <o:p></o:p></p> <div> <p class="MsoNormal">Cisco SSL VPN<o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-3s/sec-conn-sslvpn-xe-3s-book/sec-conn-sslvpn-ipv6-ssl-supp.pdf">https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-3s/sec-conn-sslvpn-xe-3s-book/sec-conn-sslvpn-ipv6-ssl-supp.pdf</a><o:p></o:p></p> </div> <div> <h4><span style="font-family:"Arial",sans-serif;color:#404040;font-weight:normal">IPv6 Support and Limitations for Pulse Connect Secure Features<br> <a href="https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/IPv6%20Support%20and%20Limitations.htm">https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/IPv6%20Support%20and%20Limitations.htm</a></span><span style="font-family:"Arial",sans-serif;color:#404040"><o:p></o:p></span></h4> </div> <div> <p class="MsoNormal">Microsoft Direct access (win7/win10) and new Always on VPN (Win10 only)<o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="https://directaccess.richardhicks.com/2018/02/05/what-is-the-difference-between-directaccess-and-always-on-vpn/">https://directaccess.richardhicks.com/2018/02/05/what-is-the-difference-between-directaccess-and-always-on-vpn/</a><o:p></o:p></p> </div> <div> <p class="MsoNormal"><a href="https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-map-da">https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-map-da</a><o:p></o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <div> <p class="MsoNormal"><o:p> </o:p></p> </div> <p class="MsoNormal">-- <o:p></o:p></p> <div> <p class="MsoNormal">---<br> best regards<br> Christian Bretterhofer<o:p></o:p></p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> <p class="MsoNormal"><o:p> </o:p></p> </div> </font></span> <p></p> </body> </html>