Remote Access ipv6

[EspenH]

Hi,

I am setting up a Endpoint VPN solution with Checkpoint. It needs to be force tunneling. 

Problem is that ipv6 does not go through the forced tunnel so when a computer gets ipv6 public ip it can basicilly bypass the tunnel..

Anyone know if there is a solution for this?

[G_W_Albrecht]

sk163313 R80.30 IPv6 features and limitations says:

The following VPN features are not supported for IPv6:

• Remote Access VPN
• Wire Mode VPN

[PhoneBoy]

If you're using the full Endpoint client, it's firewall can block IPv6 entirely.
Beyond that, the Remote Access clients don't currently support IPv6.

[EspenH]

Anyone know if this will be supported in the future?

[PhoneBoy]

I assume it will be supported in the future.
If you have this requirement, I recommend engaging with your local Check Point office.

[514numbers]

I found a new solution that has just come out and tested / works as expected. No need for desktop policy / policy server or higher end VPN remote access product.

There is a new feature within the trac_client_1.ttm and supported on E84.50+ client ( easy to automatic upgrade ). This feature doesn't require the policy server desktop firewall.

We tested this and it works.

ref sk75221 ( attribute is on SK )

allow_ipv6 / string / Blocks or allows IPv6 traffic to the client / true / false / client_decide / false E80.50

[AndreiR]

@EspenH and all,

Please point your attention to this post:

Support IPv6 in Remote Access VPN