topic Re: Remote Access Client for Windows + IPv6 in General Topics

Endpoint Security VPN + IPv6

HeikoAnkenbrand — Wed, 12 May 2021 14:26:27 GMT

The VPN Remote Access Client does not support IPv6.

This means that every PC with an installed VPN Remote Access Client can reach the Internet via IPv6. No firewall rules are active for IPv6. All IPv6 traffic is permitted.

In my case, turning off the IPv6 stack under Windows is not a solution.

Is there a way to prevent IPv6 communication with Check Point settings?

Re: Remote Access Client for Windows + IPv6

PhoneBoy — Tue, 11 May 2021 16:14:47 GMT

This requires firewall functionality in the VPN client, thus you must use Endpoint Security VPN.
And, it should be possible to configure IPv6 rules: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk128053&partition=Advanced&product=Endpoint

Re: Remote Access Client for Windows + IPv6

HeikoAnkenbrand — Thu, 13 May 2021 10:24:15 GMT

Hi @PhoneBoy,

Thanks!

I no longer understand anything here:-)
The following sk67820: Check Point Remote Access Solutions describes that there is no IPv6 support.

PS:

I find the description of the endpoint VPN clients suboptimal.
The following points should be revised here:
- Clearly structured SK
- Documentations
- List with functions matching the version
- Battle cards to compare with other vendors
...

Re: Remote Access Client for Windows + IPv6

_Val_ — Wed, 12 May 2021 14:36:21 GMT

I believe the quoted table is for VPN functionality. You cannot do IPsec to IPv6 addresses with the clients above. @PhoneBoy is talking about Desktop security rules. No contradiction.

Re: Remote Access Client for Windows + IPv6

Jan_Kleinhans — Thu, 21 Oct 2021 10:32:45 GMT

Hello Val,

is this feature on the roadmap? In germany many mobile providers are using dual stack with CGNAT for IPv4 which is not an ideal solution.

Regards,

Jan

Re: Remote Access Client for Windows + IPv6

_Val_ — Thu, 21 Oct 2021 10:41:02 GMT

Please rase an RFE for that with your local Check Point office.

Re: Remote Access Client for Windows + IPv6

Jan_Kleinhans — Thu, 21 Oct 2021 10:42:22 GMT

I will do so.

Re: Remote Access Client for Windows + IPv6

dede79 — Thu, 05 Oct 2023 12:51:03 GMT

Any Update regarding the issue? Are Desktop Policys with IPv6 possible?

Re: Remote Access Client for Windows + IPv6

Chris_Atkinson — Thu, 05 Oct 2023 12:55:36 GMT

Expect it to be aligned with the R82 release or there about.

For further details please discuss it with your local SE.

Re: Remote Access Client for Windows + IPv6

HeikoAnkenbrand — Thu, 05 Oct 2023 14:28:28 GMT

Hi @Chris_Atkinson

The local SEs do not give us any further information here either.
Will IPv6 be supported with R82 and E8x client?

Re: Remote Access Client for Windows + IPv6

Chris_Atkinson — Thu, 05 Oct 2023 15:26:35 GMT

Most likely a new gateway and client version is needed.

Re: Remote Access Client for Windows + IPv6

PhoneBoy — Fri, 06 Oct 2023 16:28:14 GMT

Not at present.
As stated by others, this is expected to be addressed as part of the next major release train (R82.x).
For formal timing/commitment, please reach out to your local Check Point office.

Re: Endpoint Security VPN + IPv6

AndreiR — Wed, 17 Apr 2024 11:24:02 GMT

@HeikoAnkenbrand and all,

Please point your attention to this post:

Support IPv6 in Remote Access VPN