| NET-IPV6-004 - IPv6 Router Advertisements must be suppressed. | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-006 - Undetermined transport is not blocked | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-008 - IPV6 Bogons are not blocked - 'deny ipv6 3FFE::/16 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-008 - IPV6 Bogons are not blocked - 'deny ipv6 any 3FFE::/16 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'deny icmp any any fragments log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'deny ipv6 any any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'permit icmp any 2001:db8:60::f14:65a1 echo-reply' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'permit icmp any 2001:db8:60::f14:65b1 echo-reply' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'permit icmp any any nd-na' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'permit icmp any any nd-ns' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'permit icmp any any packet-too-big' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'permit icmp any any parameter-problem' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-010 - Inbound ICMPv6 messages are not blocked - 'permit icmp any any time-exceeded' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'deny icmp any any log-input' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'deny ipv6 any any log-input' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'permit icmp 2001:db8:60::/44 2000::/3 echo-request' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'permit icmp 2001:db8:60::/44 2000::/3 packet-too-big ' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'permit icmp 2001:db8:60::/44 2000::/3 source-quench' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'permit icmp 2001:db8:60::/44 2000::/3 time-exceeded' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'permit icmp any any nd-na ' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-011 - Outbound ICMPv6 traffic is not blocked - 'permit icmp any any nd-ns ' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-015 - OSPFv3 routing protocol is not authenticated - 'ipv6 ospf authentication ips spi (md5) | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-015 - OSPFv3 routing protocol is not authenticated - 'ipv6 ospf encryption ips spi esp null (sha1) | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-016 - IPv6 Filter ICMPv6 on external interface | |
| NET-IPV6-017 - IPv6 Routing Header is not blocked - 'Type 0 filtering only' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-017 - IPv6 Routing Header is not blocked - 'Type Next-Header routing filter' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-022 - IPV6 Link-Local Unicast addresses are not blocked - 'Inbound Interface (deny ipv6 any fe80::/10 log)' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-022 - IPV6 Link-Local Unicast addresses are not blocked - 'Inbound Interface (deny ipv6 fe90::/10 any log)' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-022 - IPV6 Link-Local Unicast addresses are not blocked - 'Outbound Interface (deny ipv6 any fe80::/10 log)' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-022 - IPV6 Link-Local Unicast addresses are not blocked - 'Outbound Interface (deny ipv6 fe90::/10 any log)' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-024 - IPv6 6-to-4 addresses are not filtered - 'deny ipv6 2002::/16 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-024 - IPv6 6-to-4 addresses are not filtered - 'deny ipv6 any 2002::/16 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-025 - IPv6 Site Local Unicast ADDR must not be defined | CONFIGURATION MANAGEMENT |
| NET-IPV6-026 - IPv6 Site Local Unicast Addresses are not blocked - 'deny ipv6 any fec0::/10 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-026 - IPv6 Site Local Unicast Addresses are not blocked - 'deny ipv6 fec0::/10 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-027 - IPv6 Loopback ADDR is not blocked by the enclave | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-028 - IPv6 Unspecified ADDR is not blocked - 'deny ipv6 ::/128 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-028 - IPv6 Unspecified ADDR is not blocked - 'deny ipv6 any ::/128 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-029 - IPv6 Multicast Source ADDR are not blocked - 'deny ipv6 any ff00::/16 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-029 - IPv6 Multicast Source ADDR are not blocked - 'deny ipv6 ff00::/16 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-030 - Embedded IPv4-Compatible IPv6 ADDR are not blocked - 'deny ipv6 0::/96 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-030 - Embedded IPv4-Compatible IPv6 ADDR are not blocked - 'deny ipv6 any 0::/96 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-031 - Embedded IPv4-Mapped IPv6 ADDR are not blocked - 'deny ipv6 0::FFFF/96 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-031 - Embedded IPv4-Mapped IPv6 ADDR are not blocked - 'deny ipv6 any 0::FFFF/96 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-032 - IPv6 Unique Local Unicast ADDR are not blocked - 'deny ipv6 any FC00::7 log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-032 - IPv6 Unique Local Unicast ADDR are not blocked - 'deny ipv6 FC00::7 any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-033 - IPv6 routers are not configured with CEF enabled | CONFIGURATION MANAGEMENT |
| NET-IPV6-034 - IPv6 Egress Outbound Spoofing Filter - 'deny ipv6 any any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-034 - IPv6 Egress Outbound Spoofing Filter - 'ipv6 verify unicast source reachable-via rx OUT_TO_BACKBONE_ACL' | SYSTEM AND COMMUNICATIONS PROTECTION |
| NET-IPV6-036 - CE must not allow native IPv6 traffic to reach PE - 'deny ipv6 any any log' | SYSTEM AND COMMUNICATIONS PROTECTION |
