[ipv6-wg] SSL VPN Clients

We use PaloAlto GlobalProtect and have it running dual stack both as a gateway and for internal access – it works well.

Only limitation is that it doesn’t seem to pass ICMPv6 traceroute traffic over the tunnel, we haven’t logged this as a bug as it is not really a big issue.



Dan Kitchen
CEO
razorblue | IT Solutions for Business

ddi: 0330 122 7143<tel:0330%20122%207143> | t: 0333 344 6 344<tel:03333446344> | w: razorblue.com<https://www.razorblue.com>

[[Razorblue Logo]]<https://www.razorblue.com>

Legal and address information for all Razorblue Group companies can be found at razorblue.com/contact<http://www.razorblue.com/contact>.

[[ISO 9001 / ISO 27001 / Cyber Essentials]]<http://>

From: ipv6-wg <ipv6-wg-bounces at ripe.net> On Behalf Of christian bretterhofer
Sent: 10 March 2019 21:09
To: ipv6-wg at ripe.net
Subject: [ipv6-wg] SSL VPN Clients

WARNING: This e-mail originated from outside the Razorblue Group corporate network
Sorry for a little be off topic query.

I am checking which VPN solutions are IPv6 compatible outside and inside the tunnel and can so transport with any IPv6/IPv4 connection IPv6/IPv4  internal to then tunnel

Maybe somebody made such tests already and can point me to it.
What i found so far:

Citrix SSL VPN ( seems to have only partial support)
https://support.citrix.com/article/CTX233563<https://support.citrix.com/article/CTX233563>
https://www.citrix.com/blogs/2010/07/13/are-citrix-products-ipv6-ready/<https://www.citrix.com/blogs/2010/07/13/are-citrix-products-ipv6-ready/> so IPv6 / IPv6 not yet supported
https://support.citrix.com/article/CTX211780<https://support.citrix.com/article/CTX211780> NetScaler Gateway VPN users are not able to resolve IPv4 DNS when their ISP has IPv6 enabled.

OpenVPN
https://community.openvpn.net/openvpn/wiki/IPv6<https://community.openvpn.net/openvpn/wiki/IPv6> No complete example found yet.

Wireguard (LINUX only)
seems  to support it but missing other stuff like hostchecker

Cisco SSL VPN
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-3s/sec-conn-sslvpn-xe-3s-book/sec-conn-sslvpn-ipv6-ssl-supp.pdf<https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_sslvpn/configuration/xe-3s/sec-conn-sslvpn-xe-3s-book/sec-conn-sslvpn-ipv6-ssl-supp.pdf>
IPv6 Support and Limitations for Pulse Connect Secure Features
https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/IPv6%20Support%20and%20Limitations.htm<https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/IPv6%20Support%20and%20Limitations.htm>
Microsoft Direct access (win7/win10)  and new Always on VPN (Win10 only)
https://directaccess.richardhicks.com/2018/02/05/what-is-the-difference-between-directaccess-and-always-on-vpn/<https://directaccess.richardhicks.com/2018/02/05/what-is-the-difference-between-directaccess-and-always-on-vpn/>
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-map-da<https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/vpn-map-da>


--
---
best regards
Christian Bretterhofer

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ripe.net/ripe/mail/archives/ipv6-wg/attachments/20190310/96f5f987/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image1496fe.PNG
Type: image/png
Size: 31649 bytes
Desc: image1496fe.PNG
URL: <https://lists.ripe.net/ripe/mail/archives/ipv6-wg/attachments/20190310/96f5f987/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image828e7b.PNG
Type: image/png
Size: 19116 bytes
Desc: image828e7b.PNG
URL: <https://lists.ripe.net/ripe/mail/archives/ipv6-wg/attachments/20190310/96f5f987/attachment-0001.png>