Recently, I successfully implemented a DirectAccess server here in our company. We do not have a native IPv6 network so I included ISATAP in my design to assign IPv6 tunneling addresses to all of the machines that are IPv6 capable.
Everything seems to be working fine and connectivity is working just fine. I never made any changes to our Astaro UTM's between our 3 offices in regards to IPv6.
Today, I noticed in my executive report that there have been quite a few "Attacks" according to IPS for clients communicating to each other using thier ISATAP IPv6 addresses.
(SEE ATTACHED)
I noticed that there is a IPv6 area to enable IPv6 capability of the Astaro but am not quite sure if that fits into my issue.
My question is ultimately.....Is there something that I need to configure on the Astaro in order to stop the IPS from blocking this obviously valid traffic from the IPv6 (ISATAP) addresses which are being assigned to my clients from my DirectAccess server?
This thread was automatically locked due to age.
