Survivability of Enterprise VPN-Clients in IPv6-only Environments

Some of you might have experienced it first hand while connected to the Troopers SSID, your VPN client might not be able to establish the tunnel with the IPv4-only gateway. Is this an isolated issue, or a general problem? If there is a problem, what is the root cause? Is NAT64 a problem for VPN clients? Let’s find out ;-)

In this talk, we will present our results from testing various enterprise VPN client solutions (Palo Alto, Fortinet, Pulse Secure, Cisco AnyConnect et. al.) in IPv6-only networks with different VPN protocols (IPSec and SSL) to answer all these questions.

About the Speaker

Christopher Werny

Since 2006 Christopher Werny has been working for ERNW and is the head of ERNW’s network security team. He has been involved in network security implementation and assessment projects in several very large environments and is widely regarded as one of the main specialists for IPv6 and IPv6 security. His research topics include 802.1x, IPv6 and virtualization security. He started his Training Career in 2006 with the focus of primarily networking and security topics. Since 2007, he has dedicated a lot of time in IPv6 Research and the security implications of the new protocol. He has given IPv6 Workshops since that time on multiple occasions all over the globe. He holds a number of Cisco certifications and loves to dive into the depth of protocol analysis.