Endpoint Security VPN + IPv6

[HeikoAnkenbrand]

The VPN Remote Access Client does not support IPv6.

This means that every PC with an installed VPN Remote Access Client can reach the Internet via IPv6. No firewall rules are active for IPv6. All IPv6  traffic is permitted.

In my case, turning off the IPv6 stack under Windows is not a solution.

Is there a way to prevent IPv6 communication with Check Point settings?

[PhoneBoy]

This requires firewall functionality in the VPN client, thus you must use Endpoint Security VPN.
And, it should be possible to configure IPv6 rules: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[HeikoAnkenbrand]

Hi @PhoneBoy,

Thanks!

I no longer understand anything here:-)
The following sk67820: Check Point Remote Access Solutions describes that there is no IPv6 support.

PS:

I find the description of the endpoint VPN clients suboptimal.
The following points should be revised here:
- Clearly structured SK
- Documentations
- List with functions matching the version
- Battle cards to compare with other vendors
...

[_Val_]

I believe the quoted table is for VPN functionality. You cannot do IPsec to IPv6 addresses with the clients above. @PhoneBoy is talking about Desktop security rules. No contradiction.

[Jan_Kleinhans]

Hello Val,

is this feature on the roadmap? In germany many mobile providers are using dual stack with CGNAT for IPv4 which is not an ideal solution.

Regards,

Jan

[_Val_]

Please rase an RFE for that with your local Check Point office.

[Jan_Kleinhans]

I will do so.