***Updated on 14 May 2014 – regarding NET-IPv6-022, See below*** Thousands of network engineers in the DoD out there looking at implementing IPv6 now have to address a few Security and Technical Implementation Guidance (STIG) items that they used to just annotate as “Not Applicable – NA.” Now, IPv6 security is important. If you are […]
Cisco IPv6 IOS Hardening – DoD Style Read More »
Well, it is now roughly four months until the U.S. Federal Government is supposed to have its publicly-facing network services enabled for IPv6 by 30 September 2012 according to the White House directive in 2010. More specifically: Upgrade public/external facing servers and services (e.g. web, email, DNS, ISP services, etc) to operationally use native IPv6
US Government IPv6 Enablement – 4-month Status Check Read More »
UPDATE 22 May 2012 It looks as though Facebook is now 100% IPv6-enabled, without white-list filtering! See the dig below: The Updated Dig mylaptop:~$ dig @8.8.8.8 AAAA www.facebook.com ; <<>> DiG 9.8.1-P1 <<>> @8.8.8.8 AAAA www.facebook.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36329
Facebook is IPv6-enabled now – without a whitelist Read More »
Bravo to Fernando Gont for getting out a great Internet Draft (soon-to-be RFC) on the Implementation Advice on IPv6 Router Advertisement (RA) Guard. This has been one of the open, gaping wounds in the side of IPv6 enterprise deployment for years. In fact, many of us in the IPv6 and IPv6 security fields love to
IPv6 RA Guard Implementation Advice Read More »
On 8 June 2011, over 400 organizations from around the world participated in a global IPv6 functionality test. The question is what did we learn? What did we gain? Simply put: the IPv6 “boogie monster” doesn’t exist. IPv6 works, and works very well. client-side/residential adoption rates are still very low. However (as seen below), the amount of
World IPv6 Day, what did we really learn? Read More »
Tomorrow, at 8:00 pm (12:00 am GMT), World IPv6 Day begins. Here’s what to expect: All of your favorite websites should still be accessible (Google, Facebook, Yahoo, etc) If you are so inclined to sniff your traffic you should see a huge explosion of IPv6 on your network. If you don’t see this, then maybe
World IPv6 Day, T-21 Hours Read More »