

Without NAT/ULA (private ipv6 addresses), your devices are routable by default and must be isolated by explicit policy.
Yes, that’s where the basic firewall configuration comes in.
I’m running native v6 at home, with no private addressing (Since it was never implemented right in OSs unfortunately), each system has it’s own public IP address, and even an entirely unsecured device is protected since there’s still a firewall between my network and the internet.








Man, it sure would be helpful for my argument if I could.
I went back and checked the ones I was looking at, very helpful fine print stating “not for NVEM ssds”, so they all only work with mSATA M.2 SSDs, hell of a let down.