This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filtering and IPv6

Just enabled IPv6 through a tunnel broker, and connectivity is fine.

What I have found is that as I have web filtering enabled, the external IPv6 address of my requests is the Sophos UTM box, rather than the originating address.

Some googling pointed me toward using Full Transparent mode, but it will not let me select that without switching the device into bridging mode, which won't work for my v4 network.

Is there a way of having it work in full transparent for v6 connections, and normal transparent for v4 connections?

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

I know that when I was using IPv6 with tunnel broker that I could create a web filtering profile using Full Transparent without bridging. You could also try a NoNAT rule.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 rf152 over 9 years ago

Hi Scott

Did you have to do anything in particular to get it to allow you to pick full transparent? When I create a web filter profile it is greyed out, with a tool-tip telling me it's only available in bridge mode.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

I think I may have added it before the bridge requirement was enforced, a couple of major versions ago.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

It may be possible to enable from the backend, but we don't want to go down that road due to some negative support contract implications. I'm not certain if you have many clients or a few that you want to be able to browse directly with their IPv6 address. If only a few, you could add them to the transparent proxy skiplist. That would solve the natting issue, but those clients would also not be using the proxy.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 9 years ago in reply to Scott_Klassen

Just use the transparent mode. IPv6 goes okay through the web proxy and uses the external IPv6 address as expected with a proxy.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel