Hello I recently noticed unusual information in my IPCONFIG. Usually I only see Ethernet adapter Local Area Connection, but now I see Tunnel adapter isatap... and Tunnel adapter Teredo... I was wondering if this is something I should be worried about, if yes how do I remove them?

enter image description here

  • Is the isaclient for MS ISA Proxy installed? – patricks Apr 26 '12 at 7:14
  • @PatrickSchneider I have no idea actually. How do I find out? Far as know I did not explicitly install any program named like that. – IMB Apr 26 '12 at 8:07
  • just take a look into the installed Software (appwiz.cpl) if there is an ms isa client or similiar. It seems that this tunnel adapter comes from the MS ISA Client which handles a transparent proxy for clients which use software that does not support advanced proyx settings. – patricks Apr 26 '12 at 8:12
  • 1
    Arg i was wrong - sorry. ISATAP is used for IPv4 <-> IPV6 translation. See here en.wikipedia.org/wiki/ISATAP and here microsoft.com/downloads/… &displaylang=en – patricks Apr 26 '12 at 8:39
  • 2
    Maybe you enabled ipv6 or something else. I have no specific information about this. For me the Adapter appears if i have contact to an ipv6 address. – patricks Apr 26 '12 at 8:55

Both Teredo and ISATAP are mechanisms for IPv6 connectivity on IPv4-only networks. Since Windows 7 comes with IPv6 enabled, I wouldn't be surprised if they were always on, just didn't appear in ipconfig for some strange reason. (On one of my test VMs, the ISATAP adapter shows up, but not Teredo. Also strange.)

ISATAP is practically useless on a personal network, so it can be disabled permanently:

netsh interface ipv6 isatap set state disabled

On the other hand, Teredo works practically anywhere with the help of Microsoft's Teredo server – your screenshot has a global IPv6 address, too. You can leave it on, since Windows will always prefer native IPv4 over Teredo-tunneled (and possibly slower) IPv6 connections; but if you really want to get rid of it, apply the following command:

netsh interface ipv6 set teredo disabled
  • I think I'll leave it. Just want to make sure they're safe and not connected to some kind of malware. – IMB Apr 27 '12 at 5:58

IPv6 is fully backward compatible with IPv4 without conflict. So ISATAP should always be enabled. Windows >7 Home Group networks are limited to only 20 systems, so unless your switch requires IPv6 it could be disabled without consequence (but nor is there a bennifit).

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.