@mk Well you still need firewall's to prevent access. But if you want you can turn off SLACC and go with Managed DHCP. I have setup rules where "managed" IPv6 addresses can have access though the firewall if I configure for it. SLACC addresses are blocked. Does cause some other issues such as devices that have three IPv6 addresses and don't bind to the static address.