Public-health north-south firewall tests fail because the Edge uplink still has IPv6 enabled and the civic ISP is IPv4-only. What should be configured?
Select an answer to reveal the explanation.
Short Explanation
If the street only takes IPv4 mail, leave the IPv6 mailbox shut. Configure the Edge uplink to IPv4-only so gateway-firewall tests hit the path the civic ISP actually routes.
Full Explanation
Edge and gateway interfaces must match the upstream physical network. An IPv6-enabled uplink toward an IPv4-only ISP can send north-south test traffic down an unused stack and make gateway firewall look broken. Additional DFW rules and Carbon Black sensor policy do not fix that interface mismatch. Forcing IPv6 toward an IPv4-only ISP makes the problem worse.