Teredo always "qualified" in Windows 7 Ultimate / Teredo Security
Hi,
I think it's easier if I broke this question in two parts... Please bear with me...
I have 2 computers in a homegroup at home (Windows 7 Ultimate 64 bits and Windows 7 Home Basic 32 bits), behind a TP-Link TL-WR740N router (and ZoneAlarm Free 9.2.076.000).
Both computers have Teredo enabled, but the Ultimate one is always running ("qualified"), whereas the Home basic one is mainly "dormant", unless, of course, I try to reach a website which "triggers" Ipv6 (e.g. Test your IPv6.).
Since both computers have exactly the same programs installed (and homegroup file sharing by itself doesn't change Teredo status - on the Home Basic one it remains "dormant" even while I'm doing so), why does the Ultimate computer has teredo always in "qualified" status? Does Windows Ultimate 7 enables this "qualified" setting (even if there's no Ipv6 trigger) by default, maybe due to its unique features (e.g. DirectAcess)?
If not, what else would trigger Teredo?
The second part relates to the first one... I'm not very comfortable with the Teredo service running all the time, due to security reasons... It seems that the process keeps some ports open, and that the traffic is not filtered properly (or at all), by the NAT and/or the Firewal.
So, how safe Teredo really is? Should I worry leaving it running all the time? Or should I try to minimize the potential security risks by finding out how to make it run only when really needed on the Ultimate computer (as the Windows Basic computer does)? Of course there's the "disabling it altogether" option, but I don't know whether it would impact the homegroup or not.
I'd really appreciate your input.
Thanks in advance,
Leo
Hi,
I think it's easier if I broke this question in two parts... Please bear with me...
I have 2 computers in a homegroup at home (Windows 7 Ultimate 64 bits and Windows 7 Home Basic 32 bits), behind a TP-Link TL-WR740N router (and ZoneAlarm Free 9.2.076.000).
Both computers have Teredo enabled, but the Ultimate one is always running ("qualified"), whereas the Home basic one is mainly "dormant", unless, of course, I try to reach a website which "triggers" Ipv6 (e.g. Test your IPv6.).
Since both computers have exactly the same programs installed (and homegroup file sharing by itself doesn't change Teredo status - on the Home Basic one it remains "dormant" even while I'm doing so), why does the Ultimate computer has teredo always in "qualified" status? Does Windows Ultimate 7 enables this "qualified" setting (even if there's no Ipv6 trigger) by default, maybe due to its unique features (e.g. DirectAcess)?
If not, what else would trigger Teredo?
The second part relates to the first one... I'm not very comfortable with the Teredo service running all the time, due to security reasons... It seems that the process keeps some ports open, and that the traffic is not filtered properly (or at all), by the NAT and/or the Firewal.
So, how safe Teredo really is? Should I worry leaving it running all the time? Or should I try to minimize the potential security risks by finding out how to make it run only when really needed on the Ultimate computer (as the Windows Basic computer does)? Of course there's the "disabling it altogether" option, but I don't know whether it would impact the homegroup or not.
I'd really appreciate your input.
Thanks in advance,
Leo
My Computer
- OS
- Windows 7 Ultimate 64 Bit
