Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
FortiMail 7.4
CCEVS-VR-VID-11462-2024
Sophos Firewall OS Version 17.01
BSI-DSZ-CC-1016-2020
name FortiMail 7.4 Sophos Firewall OS Version 17.01
scheme US DE
status active archived
not_valid_after 26.07.2026 18.02.2025
not_valid_before 26.07.2024 18.02.2020
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11454-ci.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1016c_pdf.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11454-vr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1016a_pdf.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/st_vid11454-st.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/1016b_pdf.pdf
manufacturer Fortinet, Inc. Sophos Ltd.
manufacturer_web https://www.fortinet.com/ https://www.sophos.com
security_level {} EAL4+, ALC_FLR.3
dgst 1fe3789bf4090221 ce56716f394fc63d
heuristics/cert_id CCEVS-VR-VID-11462-2024 BSI-DSZ-CC-1016-2020
heuristics/cert_lab US BSI
heuristics/cpe_matches cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:*, cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:*, cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*, cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:* {}
heuristics/related_cves CVE-2021-32591, CVE-2023-45582 {}
heuristics/extracted_sars ASE_TSS.1, ADV_FSP.1, ALC_CMC.1, ASE_INT.1, ASE_SPD.1, ASE_OBJ.1, AVA_VAN.1, ATE_IND.1, ALC_CMS.1, AGD_OPE.1, ASE_REQ.1, ASE_CCL.1, ASE_ECD.1, AGD_PRE.1 ALC_DVS.1, ATE_COV.2, ALC_TAT.1, ALC_CMS.4, AVA_VAN.3, ATE_FUN.1, ADV_FSP.4, ATE_DPT.1, ALC_DEL.1, ATE_IND.2, ALC_LCD.1, ADV_ARC.1, ALC_FLR.3, ADV_TDS.3, ADV_IMP.1, AGD_OPE.1, ALC_CMC.4, AGD_PRE.1
heuristics/extracted_versions 7.4 17.01
heuristics/scheme_data
heuristics/protection_profiles 89f2a255423f4a20 {}
protection_profile_links https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.2E.pdf {}
pdf_data/cert_filename st_vid11454-ci.pdf 1016c_pdf.pdf
pdf_data/cert_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID11454-2024: 1
  • DE:
    • BSI-DSZ-CC-1016-2020: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL 2: 1
    • EAL 4: 1
    • EAL 4 augmented: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.3: 1
pdf_data/cert_keywords/eval_facility
  • Leidos:
    • Leidos: 1
pdf_data/cert_keywords/standard_id
  • ISO:
    • ISO/IEC 15408: 2
    • ISO/IEC 18045: 2
pdf_data/cert_metadata
  • /Producer: WeasyPrint 62.3
  • /Title: FortiMail 7.4
  • pdf_file_size_bytes: 131509
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20200302104521+01'00'
  • /Creator: Writer
  • /Keywords: "Common Criteria, Certification, Zertifizierung Sophos Firewall OS Version 17.0"
  • /ModDate: D:20200302113344+01'00'
  • /Producer: LibreOffice 6.2
  • /Subject: Sophos Firewall OS Version 17.0
  • /Title: Certification Report BSI-DSZ-CC-1016-2020
  • pdf_file_size_bytes: 305856
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 1
pdf_data/report_filename st_vid11454-vr.pdf 1016a_pdf.pdf
pdf_data/report_frontpage
  • DE:
  • US:
    • cert_id: CCEVS-VR-VID11462-2024
    • cert_item: Cisco Catalyst 9200/9200L Series Switches 17.12
    • cert_lab: US NIAP
  • DE:
    • cc_security_level: Common Criteria Part 3 extended EAL 4 augmented by ALC_FLR.3
    • cc_version: Product specific Security Target Common Criteria Part 2 conformant
    • cert_id: BSI-DSZ-CC-1016-2020
    • cert_item: Sophos Firewall OS Version 17.0
    • cert_lab: BSI
    • developer: Sophos Ltd
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
    • ref_protection_profiles: None
  • US:
pdf_data/report_keywords/cc_cert_id
  • US:
    • CCEVS-VR-VID11462-2024: 1
  • DE:
    • BSI-DSZ-CC-1016-2020: 12
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL 1: 1
    • EAL 2: 2
    • EAL 2+: 1
    • EAL 4: 5
    • EAL 4 augmented: 3
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR: 3
    • ALC_FLR.3: 4
  • AVA:
    • AVA_VAN.3: 1
pdf_data/report_keywords/vendor
  • Cisco:
    • Cisco: 26
    • Cisco Systems, Inc: 4
pdf_data/report_keywords/eval_facility
  • Gossamer:
    • Gossamer Security: 4
  • SRC:
    • SRC Security Research & Consulting: 3
pdf_data/report_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 1
      • AES-128: 1
pdf_data/report_keywords/hash_function
  • SHA:
    • SHA2:
      • SHA-2: 1
  • SHA:
    • SHA2:
      • SHA-256: 6
pdf_data/report_keywords/crypto_scheme
  • MAC:
    • MAC: 3
pdf_data/report_keywords/crypto_protocol
  • IPsec:
    • IPsec: 4
  • SSH:
    • SSH: 3
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7148: 1
pdf_data/report_keywords/standard_id
  • X509:
    • X.509: 1
  • BSI:
    • AIS 32: 1
  • ISO:
    • ISO/IEC 15408: 4
    • ISO/IEC 17065: 2
    • ISO/IEC 18045: 4
pdf_data/report_keywords/certification_process
  • ConfidentialDocument:
    • Version 1.2, 05.02.2020, Sophos Firewall OS Version 17.0, SRC Security Research & Consulting GmbH (confidential document) [8] Guidance Documentation Supplement Sophos Firewall OS Version 17.0, Version 1.00, Sophos Ltd: 1
    • being maintained, is not given any longer. In particular, prior to the dissemination of confidential documentation and information related to the TOE or resulting from the evaluation and certification: 1
pdf_data/report_metadata
pdf_data/st_filename st_vid11454-st.pdf 1016b_pdf.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-1016: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL4: 7
    • EAL4 augmented: 3
    • EAL4+: 2
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_FSP.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.1: 1
    • ALC_CMS.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.1: 1
    • ASE_REQ.1: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_IND.1: 1
  • AVA:
    • AVA_VAN: 1
    • AVA_VAN.1: 1
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.3: 7
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 5
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 5
    • FAU_GEN.2.1: 1
    • FAU_STG_EXT.1: 6
    • FAU_STG_EXT.1.1: 1
    • FAU_STG_EXT.1.2: 1
    • FAU_STG_EXT.1.3: 1
  • FCS:
    • FCS_CKM.1: 6
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 6
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 6
    • FCS_CKM.4.1: 1
    • FCS_COP: 26
    • FCS_COP.1: 4
    • FCS_NTP_EXT.1: 1
    • FCS_NTP_EXT.1.4: 1
    • FCS_RBG_EXT.1: 7
    • FCS_RBG_EXT.1.1: 1
    • FCS_RBG_EXT.1.2: 1
    • FCS_SSHC_EXT.1: 1
    • FCS_SSHS_EXT.1: 9
    • FCS_SSHS_EXT.1.1: 1
    • FCS_SSHS_EXT.1.3: 1
    • FCS_SSHS_EXT.1.4: 1
    • FCS_SSHS_EXT.1.5: 1
    • FCS_SSHS_EXT.1.6: 1
    • FCS_SSHS_EXT.1.7: 1
    • FCS_SSHS_EXT.1.8: 1
    • FCS_TLSC_EXT.1: 7
    • FCS_TLSC_EXT.1.1: 1
    • FCS_TLSC_EXT.1.2: 1
    • FCS_TLSC_EXT.1.3: 1
    • FCS_TLSC_EXT.1.4: 1
    • FCS_TLSC_EXT.2: 7
    • FCS_TLSC_EXT.2.1: 1
    • FCS_TLSC_EXT.2.3: 2
    • FCS_TLSS_EXT.1: 7
    • FCS_TLSS_EXT.1.1: 1
    • FCS_TLSS_EXT.1.2: 1
    • FCS_TLSS_EXT.1.3: 1
    • FCS_TLSS_EXT.1.4: 1
  • FIA:
    • FIA_AFL.1: 10
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_PMG_EXT.1: 7
    • FIA_PMG_EXT.1.1: 1
    • FIA_UAU.7: 5
    • FIA_UAU.7.1: 1
    • FIA_UAU_EXT.2: 6
    • FIA_UAU_EXT.2.1: 1
    • FIA_UIA_EXT.1: 6
    • FIA_UIA_EXT.1.1: 1
    • FIA_UIA_EXT.1.2: 1
  • FMT:
    • FMT_MOF: 11
    • FMT_MOF.1: 2
    • FMT_MTD: 11
    • FMT_MTD.1: 2
    • FMT_SMF.1: 6
    • FMT_SMF.1.1: 1
    • FMT_SMR.2: 5
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_APW_EXT.1: 6
    • FPT_APW_EXT.1.1: 1
    • FPT_APW_EXT.1.2: 1
    • FPT_SKP_EXT.1: 7
    • FPT_SKP_EXT.1.1: 1
    • FPT_STM_EXT: 1
    • FPT_STM_EXT.1: 5
    • FPT_STM_EXT.1.1: 1
    • FPT_STM_EXT.1.2: 1
    • FPT_TST_EXT.1: 6
    • FPT_TST_EXT.1.1: 1
    • FPT_TUD_EXT.1: 6
    • FPT_TUD_EXT.1.1: 1
    • FPT_TUD_EXT.1.2: 1
    • FPT_TUD_EXT.1.3: 1
  • FTA:
    • FTA_SSL.3: 5
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 5
    • FTA_SSL.4.1: 1
    • FTA_SSL_EXT.1: 6
    • FTA_SSL_EXT.1.1: 1
    • FTA_TAB.1: 6
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_ITC.1: 7
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP: 5
    • FTP_TRP.1: 3
  • FAU:
    • FAU_GEN.1: 13
    • FAU_GEN.1.1: 2
    • FAU_GEN.1.2: 1
    • FAU_SAR.1: 9
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.3: 6
    • FAU_SAR.3.1: 1
    • FAU_STG.1: 7
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
  • FDP:
    • FDP_ACC: 1
    • FDP_ACC.1: 1
    • FDP_IFC.1: 15
    • FDP_IFC.1.1: 2
    • FDP_IFF: 1
    • FDP_IFF.1: 10
    • FDP_IFF.1.1: 2
    • FDP_IFF.1.2: 1
    • FDP_IFF.1.3: 1
    • FDP_IFF.1.4: 1
    • FDP_IFF.1.5: 1
  • FIA:
    • FIA_AFL.1: 6
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_UAU.1: 2
    • FIA_UAU.2: 9
    • FIA_UAU.2.1: 1
    • FIA_UID.1: 4
    • FIA_UID.2: 8
    • FIA_UID.2.1: 1
    • FIA_UID.3: 2
  • FMT:
    • FMT_MOF.1: 8
    • FMT_MOF.1.1: 1
    • FMT_MSA.1: 12
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 14
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_SMF.1: 12
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 18
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 2
  • FTA:
    • FTA_SSL.3: 7
    • FTA_SSL.3.1: 1
    • FTA_SSL.4: 7
    • FTA_SSL.4.1: 1
    • FTA_TAB.1: 7
    • FTA_TAB.1.1: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.COMPONENTS_RUNNING: 1
    • A.VS_ISOLATION: 1
    • A.VS_REGULAR_UPDATES: 1
    • A.VS_TRUSTED_ADMINISTRATOR: 1
  • OE:
    • OE.COMPONENTS_RUNNING: 1
    • OE.VM_CONFIGURATION: 1
  • A:
    • A.AUDIT: 3
    • A.ENV: 3
    • A.GENPUR: 3
    • A.INFLOW: 3
    • A.NETCON: 3
    • A.NOEVIL: 3
    • A.PHYSEC: 3
    • A.PROT: 3
    • A.REMACC: 3
    • A.SINGEN: 3
    • A.TSP: 3
  • O:
    • O.ACCOUNT: 4
    • O.AUDREC: 9
    • O.AUDRECC: 1
    • O.AUTHENTICATE: 9
    • O.FILTER: 7
    • O.LIMEXT: 4
    • O.MANAGEMENT: 7
    • O.MEDIATE: 6
    • O.SECFUN: 4
  • OE:
    • OE.AUDIT: 2
    • OE.ENV: 6
    • OE.GENPUR: 3
    • OE.INFLOW: 5
    • OE.NOEVIL: 2
    • OE.PHYSEC: 2
    • OE.PROT: 5
    • OE.REMACC: 3
    • OE.SINGEN: 2
    • OE.TRAFFIC: 3
    • OE.TSP: 3
  • T:
    • T.AUDACC: 3
    • T.BYPASS: 3
    • T.MEDIAT: 3
    • T.NOAUTH: 3
    • T.REPEAT: 4
    • T.WEAKNESS: 3
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 2
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 17
      • AES-256: 1
  • constructions:
    • MAC:
      • HMAC: 1
      • HMAC-SHA-256: 4
      • HMAC-SHA-384: 2
  • AES_competition:
    • AES:
      • AES: 1
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 7
    • ECDH:
      • ECDH: 1
      • ECDHE: 2
    • ECDSA:
      • ECDSA: 12
  • FF:
    • DH:
      • DH: 1
      • DHE: 2
      • Diffie-Hellman: 2
    • DSA:
      • DSA: 3
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 3
    • SHA2:
      • SHA-256: 9
      • SHA-384: 4
      • SHA-512: 4
  • SHA:
    • SHA2:
      • SHA-256: 3
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key Agreement: 1
  • MAC:
    • MAC: 7
  • MAC:
    • MAC: 1
pdf_data/st_keywords/crypto_protocol
  • IPsec:
    • IPsec: 2
  • SSH:
    • SSH: 59
  • TLS:
    • DTLS:
      • DTLS: 2
    • SSL:
      • SSL: 2
      • SSL 2.0: 1
      • SSL 3.0: 1
    • TLS:
      • TLS: 89
      • TLS 1.0: 1
      • TLS 1.1: 4
      • TLS 1.2: 3
      • TLSv1.1: 1
  • SSH:
    • SSH: 6
  • TLS:
    • SSL:
      • SSL: 1
  • VPN:
    • VPN: 4
pdf_data/st_keywords/randomness
  • PRNG:
    • DRBG: 12
  • RNG:
    • RBG: 2
    • RNG: 4
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 6
  • GCM:
    • GCM: 8
pdf_data/st_keywords/ecc_curve
  • NIST:
    • P-256: 24
    • P-384: 24
    • P-521: 24
    • secp256r1: 3
    • secp384r1: 3
    • secp521r1: 3
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 3
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA256: 3
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA: 3
    • TLS_DHE_RSA_WITH_AES_256_CBC_SHA256: 3
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA: 3
    • TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256: 3
    • TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256: 3
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA: 3
    • TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384: 3
    • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384: 3
    • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256: 3
    • TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256: 3
    • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384: 3
    • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384: 3
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/st_keywords/standard_id
  • FIPS:
    • FIPS 140-3: 1
    • FIPS PUB 186-4: 10
  • ISO:
    • ISO/IEC 14888-3: 1
    • ISO/IEC 18031:2011: 4
    • ISO/IEC 9796-2: 2
  • NIST:
    • NIST SP 800-56A: 1
    • SP 800-90A: 5
  • PKCS:
    • PKCS #1: 2
  • RFC:
    • RFC 2818: 4
    • RFC 2986: 2
    • RFC 3268: 6
    • RFC 3526: 11
    • RFC 4252: 1
    • RFC 4253: 2
    • RFC 4346: 2
    • RFC 4492: 6
    • RFC 5077: 5
    • RFC 5246: 8
    • RFC 5280: 5
    • RFC 5289: 24
    • RFC 6125: 2
    • RFC 6960: 2
  • X509:
    • X.509: 18
  • CC:
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
  • RFC:
    • RFC 2460: 1
    • RFC 791: 1
    • RFC4253: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • extent specified by the security functional requirements: TLS, HTTPS, SSH. The features below are out of scope. Table 2: Excluded Functionality Feature Description Email security system (antivirus, antispam: 3
    • out of scope: 3
pdf_data/st_metadata
  • /Author: Leidos
  • /CreationDate: D:20240726143512-04'00'
  • /Creator: Microsoft® Word 2019
  • /ModDate: D:20240726143512-04'00'
  • /Producer: Microsoft® Word 2019
  • /Subject: Third Party Protected Information
  • /Title: Fortinet FortiMail ST
  • pdf_file_size_bytes: 717669
  • pdf_hyperlinks: https://support.fortinet.com/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 50
  • /Author: Martin Becker
  • /CreationDate: D:20200204124435+01'00'
  • /Creator: PScript5.dll Version 5.2.2
  • /Keywords: Firewall OS, network security, information flow control
  • /ModDate: D:20200204124609+01'00'
  • /Producer: Acrobat Distiller 10.0.0 (Windows)
  • /Subject: Security Target Sophos Firewall OS
  • /Title: Security Target Sophos Firewall OS
  • pdf_file_size_bytes: 412963
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 44
state/cert/convert_garbage True False
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different