IPv6 Firewalls
From ARIN IPv6 Wiki
Some people have claimed that they cannot yet sell IPv6 Internet access because there is no IPv6 firewall support. According to this ICANN study this is not quite true. At least 30% of the 42 vendors surveyed, had IPv6 support.
According to this talk many open-source and commercial firewalls supporting IPv6 are available.
- IPCop is based on Linux http://www.ipcop.org/index.php?module=pnWikka&tag=IPCopScreenshots
- m0n0wall is based on FreeBSD http://m0n0.ch/wall/screenshots.php
- pfSense is also based on FreeBSD http://pfsense.com/index.php?id=26
- FWBuilder is a management tool that builds filter setups for several different firewalls http://www.fwbuilder.org/archives/cat_screenshots.html
- Checkpoint FW1 NGX R65 on SecurePlatform supports IPv6
- FortiGate supports IPv6 in FortiOS 3.0 and up.
- Juniper SSG (formerly Netscreen) supports IPv6 in ScreenOS 5.4 and up.
- Cisco ASA (formerly PIX) supports IPv6 in version 7.0 and up.
- Stonesoft has committed to rolling out IPv6 support in 2008 across its StoneGate product line.
Commercial firewall support may be lagging behind OS and router support, but not by much.
The Campus IPv6 Wiki has a more detailed rundown of IPv6 firewall testing and hints for their use here.
You can Build an IPv6 Firewall with OpenBSD.
Read about other people's experience using an Enterprise IPv6 firewall/IDS http://www3.ietf.org/proceedings/07mar/slides/v6ops-6/v6ops-6.ppt
