Content Gateway Version 7.7.3 support for IPv6

Explicit Proxy > Content Gateway Version 7.7.3 support for IPv6

Content Gateway Version 7.7.3 support for IPv6

Help | Content Gateway | Version 7.7.3

Version 7.7 of TRITON Enterprise, including the Content Gateway proxy component, provides incremental support for IPv6.


	Important Support is provided for explicit proxy deployments only.

Content Gateway support for IPv6 includes:

IPv6 on dual IP stack Ethernet interfaces

Support for these protocols: HTTP, HTTPS, FTP, DNS

IPv6 traffic to the Internet, clients, and PAC file servers

IPv6 virtual IP addresses (vaddrs.config)

Authentication rules by client IPv6 address ranges

Client IPv6 addresses and address ranges to allow or restrict access to the proxy (ip_allow.config)

Client IPv6 addresses and address ranges to allow or restrict access to Content Gateway Manager (mgmt_allow.config)

IPv6 Primary Destination value and Source IP values in proxy filtering rules (filter.config), cache rules (cache.config), and parent proxy servers in a chain (parent.config)

IPv6 addresses in the SSL Manager Incident List

SNMP traps and counters for IPv6 data

Limits and restrictions:

IPv6-only internal networks are not supported

IPv4 must be used to communicate among all TRITON components, including other members of a Content Gateway cluster (multicast address)


	Note Contrary to the embedded descriptive text in Content Gateway Manager, Multicast Group Address must be IPv4 (Configure > My Proxy > Basic > Clustering).

With all user authentication, the Domain Controller(s) must be reachable on an IPv4 address

The ARM does not support IPv6 addresses, including for redirection rules (ipnat.config) and static bypass rules (bypass.config)

The parent proxy in a chain cannot be IPv6

IP spoofing is not supported

SOCKS proxy not supported

IPv6 proxy statistics:

Content Gateway tracks IPv6 traffic. View statistics on the Monitor > Networking > System page.

Effect of IPv6 on Event logs:

When IPv6 is enabled, Event log entries are normalized to IPv6 format. For example, "10.10.41.200" is logged as "::ffff:10.10.41.200".

To filter on a client at "10.10.41.200" in a custom log, requires the following filter:

</LogFilter>

IPv6 configuration summary

IPv6 support is disabled by default.

If Content Gateway is deployed on a Websense Appliance, first enable IPv6 in the Appliance Manager on the Configuration > Network Interfaces > IPv6 tab.

IPv6 is enabled in the Content Gateway Manager in the Network section of the Configure > My Proxy > Basic page. When it is enabled, support is enabled for all functional areas as enumerated in the preceding section.

In any field that accepts an IPv6 address, the address can be entered in any format that conforms to the standard. For example:

Leading zeros within a 16-bit value may be omitted

One group of consecutive zeros may be replaced with a double colon

When IPv6 is disabled, IPv6 entry fields are hidden from view and IPv6 values are deleted from configuration files.

When the DNS Resolver is used, go to the Configure > Network > DNS Resolver page to set an IPv4 or IPv6 preference. IPv4 is the default.