[c-nsp] So when is IPv6 failover coming to the ASA?

Alan Buxey A.L.M.Buxey at lboro.ac.uk
Fri Oct 9 06:57:29 EDT 2009


Hi,

> > @all: does everyone (who does deal with firewalls+IPv6) have also the 
> > almost identical IPv4 and IPv6 policies ?

pretty much so - why would the policy be any different? incoming port 80
traffic to a web server is same whether its v4 or v6 - the target must
be known and checked. likewise outgoing customer traffic etc. its just 
a new way of delivering the same TCP/UDP data after all.

the only different we have is with respect to allowed multicast and ICMP
as IPv6 uses a lot of that to function properly :-)

alan


More information about the cisco-nsp mailing list