Secure Operations for an IPv6 Network - BRKSEC-2044#

Speakers: Eric Vyncke (Cisco)

• Why: Authored by an author of RFC 9099 (IPv6 Security Operations), this is the authoritative treatment of the IPv6-specific security deltas — practical and standards-grounded rather than vendor-feature-driven.
• What: What changes between IPv4 and IPv6 security operations: attack surfaces specific to IPv6 (extension headers, NDP/RA issues, L2 threats), prevention techniques, and how to run audit and event correlation in dual-stack environments from DC to wireless. (from abstract only)
• How: A structured walk through the IPv6 security differences — extension header filtering dilemmas, link-layer attack mitigation (RA guard, SEND considerations), address-scan resistance that changes attacker recon, and dual-stack logging/correlation practice — grounded in RFC 9099.
• Where applicable: Any dual-stack network; vendor-neutral in content since it follows the RFC. Adjacent rather than core for this PM only because IPv6 ops hardening is steady-state practice rather than a new frontier — but high quality within that lane.