[AusNOG] Firewall thoughts

[Matt Palmer]

On Tue, Mar 10, 2015 at 09:49:58AM +0800, Shane Chrisp wrote:
> On 10/03/15 08:44, Matt Palmer wrote:
> >On Tue, Mar 10, 2015 at 08:31:33AM +0800, Shane Chrisp wrote:
> >>The Fortinet is brilliant. Though, we are a Fortinet Gold Partner, but we
> >>use them extensively in house and also at clients. Extremely reliable and
> >>flexible, but like most things, there is a learning curve.
> >
> >Appallingly poor IPv6 support, though.  We got lumped with one in our new
> >office, heart-breaking not being able to most of the things that IPv6 makes
> >easy.
> >
> >- Matt
> >
> 
> Such as what? We use IPv6 on almost all the units we deploy.

PD, proto 41 tunnels, and RDNSS.  Apparently (according to the people we
paid a lot of money to set it up) the Fortinet doesn't support any of those.

- Matt