Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 3351 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Filtering and IPv6

rf152
Just enabled IPv6 through a tunnel broker, and connectivity is fine.

What I have found is that as I have web filtering enabled, the external IPv6 address of my requests is the Sophos UTM box, rather than the originating address.

Some googling pointed me toward using Full Transparent mode, but it will not let me select that without switching the device into bridging mode, which won't work for my v4 network.

Is there a way of having it work in full transparent for v6 connections, and normal transparent for v4 connections?


This thread was automatically locked due to age.
Parents
  • 0
    It may be possible to enable from the backend, but we don't want to go down that road due to some negative support contract implications.  I'm not certain if you have many clients or a few that you want to be able to browse directly with their IPv6 address.  If only a few, you could add them to the transparent proxy skiplist.  That would solve the natting issue, but those clients would also not be using the proxy.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply
  • 0
    It may be possible to enable from the backend, but we don't want to go down that road due to some negative support contract implications.  I'm not certain if you have many clients or a few that you want to be able to browse directly with their IPv6 address.  If only a few, you could add them to the transparent proxy skiplist.  That would solve the natting issue, but those clients would also not be using the proxy.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Children
  • 0 in reply to Scott_Klassen
    Just use the transparent mode. IPv6 goes okay through the web proxy and uses the external IPv6 address as expected with a proxy.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

Unfiltered HTML