Network security is an arms race, and IPv6 provides building blocks for weapons for both sides. Thats why many major IT infrastructure vendors, security companies, and operating system makers are releasing enhanced IPv6 security products now to support (ie they sell lots of products) the big 2008 IPv6 activations by the US Federal government and DoD. There are already a couple of stateful firewalls and a commercial IDS that can inspect a chain of IPv6 headers and make intelligent security decisions. Still, IPv6 security is very new and we need more professional-grade products. It's a good market opportunity now!

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11406/34004#34004