topic Remote Access ipv6 in Endpoint

Remote Access ipv6

EspenH — Tue, 03 Mar 2020 08:51:13 GMT

Hi,

I am setting up a Endpoint VPN solution with Checkpoint. It needs to be force tunneling.

Problem is that ipv6 does not go through the forced tunnel so when a computer gets ipv6 public ip it can basicilly bypass the tunnel..

Anyone know if there is a solution for this?

Re: Remote Access ipv6

G_W_Albrecht — Tue, 03 Mar 2020 10:46:47 GMT

sk163313 R80.30 IPv6 features and limitations says:

The following VPN features are not supported for IPv6:

Remote Access VPN
Wire Mode VPN

Re: Remote Access ipv6

PhoneBoy — Tue, 03 Mar 2020 15:57:20 GMT

If you're using the full Endpoint client, it's firewall can block IPv6 entirely.
Beyond that, the Remote Access clients don't currently support IPv6.

Re: Remote Access ipv6

EspenH — Fri, 21 Aug 2020 10:57:18 GMT

Anyone know if this will be supported in the future?

Re: Remote Access ipv6

PhoneBoy — Fri, 21 Aug 2020 13:51:17 GMT

I assume it will be supported in the future.
If you have this requirement, I recommend engaging with your local Check Point office.

Re: Remote Access ipv6

514numbers — Wed, 24 Mar 2021 17:53:19 GMT

I found a new solution that has just come out and tested / works as expected. No need for desktop policy / policy server or higher end VPN remote access product.

There is a new feature within the trac_client_1.ttm and supported on E84.50+ client ( easy to automatic upgrade ). This feature doesn't require the policy server desktop firewall.

We tested this and it works.

ref sk75221 ( attribute is on SK )

allow_ipv6 / string / Blocks or allows IPv6 traffic to the client / true / false / client_decide / false E80.50

Re: Remote Access ipv6

AndreiR — Wed, 17 Apr 2024 11:22:57 GMT

@EspenH and all,

Please point your attention to this post:

Support IPv6 in Remote Access VPN