IPv6 Migration & Security

IPv6 will be the next big thing in many networks, as connectivity grows beyond everything currently known. Going this step without introducing operational or security problems can be a challenging task. In this workshop we will show you how to do exactly that. After a short (half-day) refresher of the main concepts and protocols in IPv6 networks we will cover the security aspects of IPv6 and discuss migration strategies.

Agenda:

• Basics: Structure of IPv6 packets, Headers, Address types
• Neighbor Discovery, Router Discovery, Stateless vs. stateful address configuration
• Routing and routing protocols in IPv6

• Where IPv6 natively helps security

• Comparison of the trust models of IPv4 and IPv6

• IPv4 attacks in the age of IPv6

• The role of DHCP & DNS and why they might become primary attack targets.

• New protocols => new threats?

• Threats by co-existence
• Threats in the course of v4 => v6 migration

• Problems with tunnel/transition technologies

• Mitigating controls on host, gateway and network level.

• How firewalls handle IPv6 traffic. Overview which products can perform “full IPv6 inspection” and which can’t.

Strategies and approaches for efficient and secure migration scenarios. Pitfalls of migration projects and some case studies.