topic Harmony connect is not able to protect the traffic if IPv6 interface is found in SASE and Remote Access

Harmony connect is not able to protect the traffic if IPv6 interface is found

Blason_R — Tue, 08 Aug 2023 10:36:47 GMT

Hi Team,

I was testing out this application and not sure if any observed this issue.

I am testing out Harmony connect IA scenario and if the laptop is connected to my company network all the url filtering works as expected. However if I move out of office or connect to my mobile hotspot certain site directly works even if agent is connected.

So I started troubleshooting and concluded that when I move to Mobile Hotspot my IPv6 kicks in and thus looks like traffic for IPv6 is not being tunnelled and gets bypassed.

To confirm I removed the IPv6 stack from wifi and lan port and it started working perfectly fine.

I re-enabled the IPv6 and its same scenario where if sites are getting resolved with IPv6 hostname gets bypassed.

has anyone experienced this issue?

TIA

Blason R

Re: Harmony connect is not able to protect the traffic if IPv6 interface is found

Chris_Atkinson — Tue, 08 Aug 2023 10:52:56 GMT

Currently a known limitation, please raise it with your local CP SE / local office if this is critical for you.

Re: Harmony connect is not able to protect the traffic if IPv6 interface is found

Blason_R — Tue, 08 Aug 2023 10:57:02 GMT

Hmm - Thanks for confirming.

Shouldn't it be raised to RnD?

Re: Harmony connect is not able to protect the traffic if IPv6 interface is found

Chris_Atkinson — Tue, 08 Aug 2023 11:03:49 GMT

Yes and that path is via your SE as an RFE to raise the priority of it comparative to other road-map items.