Workshop - IPv6 Migration & Security

IPv6 Migration & Security

IPv6 will be the next big thing in many networks, as connectivity grows beyond everything currently known. Going this step without introducing operational or security problems can be a challenging task. In this workshop we will show you how to do exactly that.
After a short (half-day) refresher of the main concepts and protocols in IPv6 networks we will cover the security aspects of IPv6 and discuss migration strategies.

Agenda:

- Basics: Structure of IPv6 packets, Headers, Address types
- Neighbor Discovery, Router Discovery, Stateless vs. stateful address configuration
- Routing and routing protocols in IPv6
- Where IPv6 natively helps security

- Comparison of the trust models of IPv4 and IPv6
- IPv4 attacks in the age of IPv6
- The role of DHCP & DNS and why they might become primary attack targets.

- New protocols => new threats?
- Threats by co-existence
- Threats in the course of v4 => v6 migration
- Problems with tunnel/transition technologies

- Mitigating controls on host, gateway and network level.
- How firewalls handle IPv6 traffic. Overview which products can perform "full IPv6 inspection" and which can't.

- Strategies and approaches for efficient and secure migration scenarios. Pitfalls of migration projects and some case studies.