2 ms·
That’s definitely not the norm. IPv6 is enabled by default and it’s not recommended to disable it. Only really locked down places that are ignoring recommendati
by orev 2y ago
That’s definitely not the norm. IPv6 is enabled by default and it’s not recommended to disable it. Only really locked down places that are ignoring recommendations would have it disabled.
Whether it’s exposed to the Internet is another question, but pretty much everyone has a firewall to at least stop passive scans.
- doubleg72 2y agoWe do it in our 10k+ environment.
- ammo1662 2y agoIt seems that this can be triggered before the packet reaches the firewall. https://www.bleepingcomputer.com/news/microsoft/zero-click-windows-tcp-ip-rce-impacts-all-systems-with-ipv6-enabled-patch-now/ https://www.bleepingcomputer.com/news/microsoft/zero-click-w...
- orev 2y agoI meant a network level firewall at the perimeter, but this is good information to know you can’t rely on the Windows firewall.