Covert channels identification and mitigation for IPv6 extension headers

Intrusion Detection and Prevention (IDP) supports the identification and mitigation of covert channels identification and mitigation for IPv6 extension headers. Covert channel is a type of attack in which information is transferred through existing channels that should not be allowed to communicate by the configured security policy. Thus, this kind of communication violates the existing security system. The IPv6 covert channel anomalies are part of the IDP signature database package. You can configure the anomalies by using the predefined-attacks statement under idp-policies.