Currently, the Umbrella roaming client only supports dual stack for the MacOS (support for Windows standalone dual stack is on its way).
Stand alone support for IPv6 for both the Mac and Windows operating systems is not supported.
FAQ for IPv6 and Umbrella
Q. Does Umbrella support the blocking of AAAA requests (with IPv4)?
Yes, AAAA queries for blocked domains received over IPv4 will return the IPv4-mapped IPv6 address of a block page.
Q. Does Umbrella support an IPv6 block page, or more generally, blocking IPv6 requests?
It is true that block pages are not reachable over IPv6, however, there's a bit of a misnomer with "blocking IPv6 requests". Umbrella allows or blocks domains, which are neither IPv4 or IPv6 addresses. The Umbrella DNS service resolves domains to IPv4 or IPv6 addresses. When Umbrella blocks something, it returns an IPv4 address for A queries or an IPv4-mapped IPv6 address for AAAA queries. The IP address returned is the one for the Umbrella block page rather than the domain.
In either case, the returned IP address is only accessible over IPv4, so the client must be at least IPv4 capable in order to subsequently connect to it.
When a request is proxied through the Umbrella intelligent proxy things are much the same. AAAA requests for grey-listed domains—received over IPv4—will return the IPv4-mapped IPv6 address of a proxy. The client must be IPv4 capable in order to subsequently connect to the proxy.
Q. If an IPv6 AAAA request is allowed, does Umbrella log that?
Yes, Umbrella does log it provided the request came from a registered identity or identities. Networks that have IPv6 addresses are not officially supported as origins—meaning that they cannot be registered with Umbrella as networks. The same is true of roaming clients or other identity types. Thus, DNS queries received over IPv6 will not have policy or reporting applied to them since there is nothing to apply it to.
There is a difference between the transport over which the query was received and the query itself (which can come over either transport). We generally don’t support IPv6 as a transport. IPv6 related queries though (eg: AAAA records) are supported, but if blocked, will return the IPv4-mapped IPv6 address of the block page.