ASD ISM 1186 Ensure IPv6 network security appliances are used

System administrators should evaluate the current network security devices to check if they support IPv6.

This involves reviewing the technical specifications from the device manufacturers or consulting with the vendor to ensure IPv6 is listed as a feature.

IT managers should budget for the purchase of security appliances that support IPv6 if the existing ones do not.

This involves gathering cost estimates from suppliers and planning a timeline that fits into the next financial cycle without disrupting current operations.

Procurement teams must update supplier agreements to include IPv6 support as a requirement when purchasing new network appliances.

They can do this by adding specific clauses in the contracts and consulting with IT to understand which devices are critical.

Network engineers should configure new IPv6-capable devices as per the organisation's security policy.

This could mean installing the devices on a test network first, setting them up according to best practices received from the Australian Cyber Security Centre (ACSC), and then deploying them on the live network.

The IT security team should set up regular reviews to ensure IPv6-enabled devices are functioning correctly and updating as required.

They should document the review process, noting the checks performed and any issues found, and keep this documentation readily available for audits or evaluations.