This object indicates the address family, such as IPv4 or IPv6, of the IP address from which the user connected when performing the audited action, as a variable binding in the firewall's SNMP notification. It works together with the accompanying IP address object so the address field is interpreted correctly. For example, this object showing ipv6 tells the admin the following address object should be read as an IPv6 address rather than IPv4.