Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

IPv6 support

The feature list for IPv6 support in Sophos Firewall is as follows:

Network

Feature IPv6 support

Static interfaces:

Physical, bridge, alias, VLAN, LAG

IPv6 Cellular WAN
IPv6 PPPoE
DHCP prefix delegation

DHCP:

Server, client, relay

Dynamic lease, static lease

DNS and WINS servers

Neighbor Discovery Protocol
DNS: lookup, reverse name lookup
Dynamic DNS
DNS64
IPv6 tunneling: 6in4, 6to4, 6rd, 4in6
Tunnel broker
RED hardware

Firewall RED

(Site-to-site tunnels between two Sophos Firewall devices)

Routing

Feature IPv6 support
Static routes: unicast route
SD-WAN routes
Dynamic unicast routes: BGP-IPv6, OSPFv3
Dynamic unicast routes: RIPng
Dynamic multicast routes - Multicast Listener Discovery (MLD)
Static multicast routes
WAN load balancing
Upstream proxy
Router advertisement

VPN

Feature IPv6 support
SSL VPN: Site-to-site
SSL VPN: Remote access
IPsec: Site-to-site
IPsec: Remote access
L2TP VPN
PPTP VPN

Rules and policies

Feature IPv6 support
Zone-based firewall rules
WAF rules
Network address translation: Only NAT66
Server load balancing
SSL/TLS inspection rules

Protection modules

Feature IPv6 support

IPS:

DoS bypass rule

IPS policies

Spoof protection

Web filtering
Application filter
Malware scanning
Wireless
Zero-day protection
Advanced protection

Email

Feature IPv6 support
SMTP MTA
SMTP proxy
IMAP proxy
POP proxy
Quarantine digest

Administrator and user portals

Feature IPv6 support
Web admin console
User portal
SSH

Administration

Feature IPv6 support
NTP
SNMP

Authentication

Feature IPv6 support
Authentication server

Activity, diagnostics, logging

Feature IPv6 support
Current activities: users, connections

Diagnostics:

Ping, traceroute

Name lookup, route lookup

packet capture

Syslog
Reporting

Hosts and services

Feature IPv6 support
IP hosts
Country hosts

Country host isn't supported for IPv6. 

FQDN hosts

IPv6 addresses won't be resolved for FQDN hosts.

System services

Feature IPv6 support
Traffic shaping QoS

Firmware upgrades

Feature IPv6 support
Up2date infrastructure

Certificates

Feature IPv6 support
Let's Encrypt certificates