Are Commercial Firewalls Ready for IP Version 6?
IP version 6 transport is not broadly supported by commercial firewalls. If organizations attempt to "Go native IPv6" today, they will be limited to choosing among the 31% of the firewall products surveyed that support IPv6 transport. The paper does note, however, that although fewer than one in three products support IPv6 transport and a desirable set of security features, support among the firewall market share leaders improves this figure somewhat. This observation is consistent with recent Network World product testing conducted by Dr. Joel Snyder. The paper finds the limited support for IPv6 stateful packet inspection across the commercial firewall product sector quite worrisome. Many vendors extend stateful packet inspection techniques to provide additional application-level protection measures.