Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
UTM / NG-Firewall Software Suite (4.3.12.2 (S, M, XL)) ( ANSSI-CC-2023/62 )
ANSSI-CC-2023/62 		MultiApp V5.1 JCSConfiguration 1 : 5.1 revision B version 2 (0x3055) et filter set 0x00,configuration 2 : 5.1 revision C version 2 (0x3055) et filter set 0x10,configuration 3 : 5.1 revision B version 2 (0x3055) et filter set 0x14,configuration 4 : 5.1 revision C version 2 (0x3055) et filter set 0x24(ANSSI-CC-2025/55)
ANSSI-CC-2025/55
name UTM / NG-Firewall Software Suite (4.3.12.2 (S, M, XL)) ( ANSSI-CC-2023/62 ) MultiApp V5.1 JCSConfiguration 1 : 5.1 revision B version 2 (0x3055) et filter set 0x00,configuration 2 : 5.1 revision C version 2 (0x3055) et filter set 0x10,configuration 3 : 5.1 revision B version 2 (0x3055) et filter set 0x14,configuration 4 : 5.1 revision C version 2 (0x3055) et filter set 0x24(ANSSI-CC-2025/55)
not_valid_after 08.12.2028 04.02.2031
not_valid_before 28.12.2023 04.02.2026
cert_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/certificat-CC-2023_62fr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2025-55-certificat.pdf
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2023_62fr.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2025-55-rapport.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-cible-2023_62en.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2025-55-cible.pdf
manufacturer Stormshield THALES DIS FRANCE SA
manufacturer_web https://www.stormshield.eu/ https://www.thalesgroup.com/en/europe/france
security_level EAL4+, ALC_FLR.3 ALC_FLR.2, EAL6+
dgst 91aa10edaf1efbcf 2317867e9472732a
heuristics/cert_id ANSSI-CC-2023/62 ANSSI-CC-2025/55
heuristics/extracted_sars ALC_DEL.1, ATE_FUN.1, ALC_CMS.4, ASE_INT.1, ADV_FSP.4, ADV_TDS.3, AGD_OPE.1, ASE_CCL.1, ADV_ARC.1, ATE_COV.2, ASE_SPD.1, AVA_VAN.3, ATE_IND.2, ALC_CMC.4, ALC_TAT.1, ATE_DPT.1, ASE_ECD.1, AGD_PRE.1, ALC_DVS.1, ASE_TSS.1, ADV_IMP.1, ASE_REQ.2, ALC_FLR.3, ALC_LCD.1, ASE_OBJ.2 ALC_DEL.1, ADV_INT.3, AVA_VAN.5, ASE_INT.1, ADV_SPM.1, ATE_DPT.3, ADV_TDS.5, AGD_OPE.1, ASE_CCL.1, ALC_CMS.5, ADV_ARC.1, ATE_FUN.2, ALC_TAT.3, ADV_FSP.5, ASE_TSS.2, ASE_SPD.1, ATE_IND.2, ATE_COV.3, ALC_CMC.5, ASE_ECD.1, AGD_PRE.1, ALC_FLR.2, ALC_DVS.2, ASE_REQ.2, ADV_IMP.2, ALC_LCD.1, ASE_OBJ.2
heuristics/extracted_versions 4.3.12.2 5.1
heuristics/report_references/directly_referenced_by {} ANSSI-CC-2025/58, ANSSI-CC-2026/02
heuristics/report_references/directly_referencing {} ANSSI-CC-2023/01-R01
heuristics/report_references/indirectly_referenced_by {} ANSSI-CC-2025/58, ANSSI-CC-2026/02
heuristics/report_references/indirectly_referencing {} ANSSI-CC-2023/01-R01
heuristics/st_references/directly_referencing {} ANSSI-CC-2023/01-R01
heuristics/st_references/indirectly_referencing {} ANSSI-CC-2023/01-R01
heuristics/protection_profiles {} 7f886b64878b68c1
protection_profile_links {} https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0099V2b_pdf.pdf
pdf_data/cert_filename certificat-CC-2023_62fr.pdf ANSSI-CC-2025-55-certificat.pdf
pdf_data/cert_keywords/cc_cert_id
  • FR:
    • ANSSI-CC-2023/62: 2
  • FR:
    • ANSSI-CC-2025/55: 2
pdf_data/cert_keywords/cc_protection_profile_id
  • BSI:
    • BSI-PP-099-V2-2020: 1
pdf_data/cert_keywords/cc_security_level
  • EAL:
    • EAL2: 1
    • EAL4: 1
  • EAL:
    • EAL2: 1
    • EAL6: 1
pdf_data/cert_keywords/cc_sar
  • ALC:
    • ALC_FLR.3: 2
  • ALC:
    • ALC_FLR.2: 2
pdf_data/cert_keywords/eval_facility
  • OPPIDA:
    • OPPIDA: 2
  • CEA-LETI:
    • CEA - LETI: 1
pdf_data/report_filename ANSSI-CC-2023_62fr.pdf ANSSI-CC-2025-55-rapport.pdf
pdf_data/report_keywords/cc_cert_id
  • FR:
    • ANSSI-CC-2023/62: 2
  • FR:
    • ANSSI-CC-2023/01-R01: 2
    • ANSSI-CC-2025/55: 3
pdf_data/report_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0099-V2-2020: 2
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL2: 3
    • EAL4: 2
    • EAL4+: 1
  • ITSEC:
    • ITSEC E3 Elémentaire: 1
  • EAL:
    • EAL2: 2
    • EAL6: 1
    • EAL7: 1
  • ITSEC:
    • ITSEC E6 Elevé: 1
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.3: 3
  • AGD:
    • AGD_OPE: 2
    • AGD_PRE: 1
  • ALC:
    • ALC_FLR: 1
    • ALC_FLR.2: 2
  • AVA:
    • AVA_VAN: 1
pdf_data/report_keywords/eval_facility
  • CESTI:
    • CESTI: 1
  • OPPIDA:
    • OPPIDA: 1
  • CEA-LETI:
    • CEA - LETI: 1
  • CESTI:
    • CESTI: 5
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
pdf_data/report_metadata
pdf_data/st_filename ANSSI-cible-2023_62en.pdf ANSSI-CC-2025-55-cible.pdf
pdf_data/st_keywords/cc_cert_id
  • NL:
    • CC-01: 3
    • CC-02: 6
    • CC-03: 4
  • FR:
    • ANSSI-CC-2023/01-R01: 1
  • NL:
    • CC-1: 2
    • CC-2: 4
    • CC-3: 3
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-CC-PP-0068-V2-2011-MA-01: 1
    • BSI-CC-PP-0084-2014: 1
    • BSI-CC-PP-0099-V2-2020: 1
    • BSI-PP-0055-2009: 1
    • BSI-PP-0056-V2-MA-2012: 1
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL4: 28
    • EAL4 augmented: 2
    • EAL4+: 2
  • EAL:
    • EAL 6+: 1
    • EAL6: 34
    • EAL6 augmented: 1
    • EAL6+: 3
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP.1: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.3: 6
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 3
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 10
    • ADV_FSP.1: 1
    • ADV_FSP.2: 2
    • ADV_FSP.4: 2
    • ADV_FSP.5: 8
    • ADV_IMP.1: 5
    • ADV_IMP.2: 4
    • ADV_INT.2: 2
    • ADV_INT.3: 2
    • ADV_SPM.1: 9
    • ADV_TDS.1: 2
    • ADV_TDS.3: 3
    • ADV_TDS.4: 2
    • ADV_TDS.5: 6
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 9
    • AGD_PRE: 2
    • AGD_PRE.1: 7
  • ALC:
    • ALC_CMC.4: 2
    • ALC_CMC.5: 4
    • ALC_CMS.5: 3
    • ALC_DEL.1: 4
    • ALC_DVS.2: 6
    • ALC_FLR.2: 7
    • ALC_LCD.1: 6
    • ALC_TAT.1: 2
    • ALC_TAT.2: 2
    • ALC_TAT.3: 4
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 1
  • ATE:
    • ATE_COV.1: 2
    • ATE_COV.2: 3
    • ATE_COV.3: 2
    • ATE_DPT.1: 1
    • ATE_DPT.3: 4
    • ATE_FUN.1: 6
    • ATE_FUN.2: 4
    • ATE_IND.2: 5
  • AVA:
    • AVA_VAN.5: 4
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_ARP: 2
    • FAU_ARP.1: 7
    • FAU_ARP.1.1: 1
    • FAU_GEN: 4
    • FAU_GEN.1: 6
    • FAU_GEN.1.1: 2
    • FAU_GEN.1.2: 4
    • FAU_GEN.2: 6
    • FAU_GEN.2.1: 2
    • FAU_SAA.1: 1
    • FAU_SAA.4: 9
    • FAU_SAA.4.1: 4
    • FAU_SAA.4.2: 2
    • FAU_SAA.4.3: 3
    • FAU_SAR.1: 7
    • FAU_SAR.1.1: 2
    • FAU_SAR.1.2: 2
    • FAU_STG.3: 7
    • FAU_STG.3.1: 2
  • FCS:
    • FCS_CKM: 1
    • FCS_CKM.1: 24
    • FCS_CKM.4: 19
    • FCS_COP.1: 61
    • FCS_TLSC_EXT.1: 25
    • FCS_TLSC_EXT.1.1: 3
    • FCS_TLSC_EXT.1.2: 3
    • FCS_TLSC_EXT.1.5: 3
  • FDP:
    • FDP_ACC.1: 2
    • FDP_ACC.2: 6
    • FDP_ACC.2.1: 2
    • FDP_ACC.2.2: 2
    • FDP_IFC.1: 10
    • FDP_IFC.1.1: 2
    • FDP_IFC.2: 6
    • FDP_IFC.2.1: 3
    • FDP_IFC.2.2: 2
    • FDP_IFF.1: 29
    • FDP_IFF.1.1: 2
    • FDP_IFF.1.2: 2
    • FDP_IFF.1.3: 2
    • FDP_IFF.1.4: 2
    • FDP_IFF.1.5: 2
    • FDP_ITC.1: 8
    • FDP_ITC.2: 8
    • FDP_UCT.1: 12
    • FDP_UCT.1.1: 2
    • FDP_UIT.1: 12
    • FDP_UIT.1.1: 2
    • FDP_UIT.1.2: 2
  • FIA:
    • FIA_UAU.5: 77
    • FIA_UAU.5.1: 5
    • FIA_UAU.5.2: 5
    • FIA_UID.1: 2
  • FMT:
    • FMT_MOF.1: 10
    • FMT_MOF.1.1: 3
    • FMT_MSA.3: 2
    • FMT_MTD: 23
    • FMT_MTD.1: 11
    • FMT_MTD.1.1: 3
    • FMT_SMF: 1
    • FMT_SMF.1: 12
    • FMT_SMF.1.1: 2
    • FMT_SMR.1: 8
    • FMT_SMR.1.1: 3
    • FMT_SMR.1.2: 4
  • FPT:
    • FPT_ITT.1: 10
    • FPT_ITT.1.1: 2
    • FPT_STM.1: 1
    • FPT_TDC.1: 8
    • FPT_TDC.1.1: 2
    • FPT_TDC.1.2: 2
  • FTP:
    • FTP_ITC.1: 2
    • FTP_ITT.1: 1
    • FTP_TRP.1: 74
    • FTP_TRP.1.1: 5
    • FTP_TRP.1.2: 5
    • FTP_TRP.1.3: 5
  • FAU:
    • FAU_ARP.1: 16
    • FAU_ARP.1.1: 1
    • FAU_SAA.1: 2
    • FAU_SAS.1: 2
  • FCO:
    • FCO_NRO: 6
    • FCO_NRO.2: 3
  • FCS:
    • FCS_CKM: 53
    • FCS_CKM.1: 30
    • FCS_CKM.1.1: 3
    • FCS_CKM.2: 11
    • FCS_CKM.2.1: 1
    • FCS_CKM.3: 6
    • FCS_CKM.3.1: 1
    • FCS_CKM.4: 30
    • FCS_CKM.4.1: 2
    • FCS_CMK.4: 1
    • FCS_COP: 57
    • FCS_COP.1: 25
    • FCS_COP.1.1: 5
    • FCS_RNG: 21
    • FCS_RNG.1: 12
    • FCS_RNG.1.1: 3
    • FCS_RNG.1.2: 3
  • FDP:
    • FDP_ACC: 52
    • FDP_ACC.1: 19
    • FDP_ACC.2: 6
    • FDP_ACF: 47
    • FDP_ACF.1: 24
    • FDP_IFC: 27
    • FDP_IFC.1: 14
    • FDP_IFC.2: 2
    • FDP_IFF: 17
    • FDP_IFF.1: 14
    • FDP_ITC: 14
    • FDP_ITC.1: 15
    • FDP_ITC.2: 20
    • FDP_ITT.1: 2
    • FDP_RIP: 107
    • FDP_RIP.1: 11
    • FDP_RIP.1.1: 1
    • FDP_ROL: 14
    • FDP_ROL.1: 5
    • FDP_SDC.1: 2
    • FDP_SDI: 9
    • FDP_SDI.2: 4
    • FDP_UCT.1: 2
    • FDP_UIT: 7
    • FDP_UIT.1: 4
  • FIA:
    • FIA_AFL: 27
    • FIA_AFL.1.1: 2
    • FIA_AFL.1.2: 2
    • FIA_API.1: 2
    • FIA_ATD: 14
    • FIA_ATD.1: 3
    • FIA_UAU: 75
    • FIA_UAU.1: 6
    • FIA_UAU.1.1: 2
    • FIA_UAU.1.2: 2
    • FIA_UAU.4: 1
    • FIA_UAU.4.1: 1
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UAU.6.1: 1
    • FIA_UID: 44
    • FIA_UID.1: 19
    • FIA_UID.1.1: 2
    • FIA_UID.1.2: 2
    • FIA_UID.2: 1
    • FIA_USB: 7
    • FIA_USB.1: 3
  • FMT:
    • FMT_LIM: 42
    • FMT_LIM.1: 18
    • FMT_LIM.1.1: 2
    • FMT_LIM.2: 17
    • FMT_LIM.2.1: 2
    • FMT_MSA: 114
    • FMT_MSA.1: 15
    • FMT_MSA.2: 2
    • FMT_MSA.3: 22
    • FMT_MTD: 69
    • FMT_MTD.1: 13
    • FMT_MTD.3: 1
    • FMT_SMF: 83
    • FMT_SMF.1: 29
    • FMT_SMF.1.1: 2
    • FMT_SMR: 94
    • FMT_SMR.1: 35
    • FMT_SMR.1.1: 2
    • FMT_SMR.1.2: 2
  • FPR:
    • FPR_UNO: 6
    • FPR_UNO.1: 9
    • FPR_UNO.1.1: 1
  • FPT:
    • FPT_EMS: 4
    • FPT_EMS.1: 16
    • FPT_EMS.1.1: 3
    • FPT_EMS.1.2: 3
    • FPT_FLS: 54
    • FPT_FLS.1: 18
    • FPT_FLS.1.1: 2
    • FPT_ITT: 7
    • FPT_ITT.1: 2
    • FPT_PHP: 8
    • FPT_PHP.3: 19
    • FPT_PHP.3.1: 1
    • FPT_RCV: 15
    • FPT_RCV.3: 4
    • FPT_RCV.4: 1
    • FPT_TDC.1: 8
    • FPT_TDC.1.1: 1
    • FPT_TDC.1.2: 1
    • FPT_TST: 9
    • FPT_TST.1: 16
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FRU:
    • FRU_FLT.2: 2
  • FTP:
    • FTP_ITC: 20
    • FTP_ITC.1: 7
    • FTP_ITC.1.1: 1
    • FTP_ITC.1.2: 1
    • FTP_ITC.1.3: 1
    • FTP_TRP: 6
    • FTP_TRP.1: 7
pdf_data/st_keywords/cc_claims
  • O:
    • O.BACKUP_RESTORATION: 6
    • O.CRYPTO: 6
    • O.IPS_ATTACK_DETECTION: 8
    • O.IPS_RFC_COMPLIANCE: 7
    • O.LAA_IPS: 8
    • O.LAA_PCAOA: 12
    • O.LAA_PCFI: 6
    • O.PCAOA: 13
    • O.PCFI_APPLICATION_CONTEXT: 4
    • O.PCFI_ENCRYPTION: 18
    • O.PCFI_FILTERING: 7
    • O.PROTECT_ADMIN_SESSIONS: 6
    • O.PROTECT_LOGS: 6
    • O.RESIST_AUTH_ADMIN: 6
  • OE:
    • OE.AUTONOMOUS: 3
    • OE.CRYPTO_EXT: 4
    • OE.ENROLLMENT: 3
    • OE.GOOD_PCFI: 3
    • OE.INTERPOSITION: 4
    • OE.PASSWORD: 3
    • OE.PERSONNEL: 3
    • OE.PROTECT_APPLIANCES: 3
    • OE.PROTECT_VPN_CLIENTS: 3
    • OE.PROTECT_VPN_PEER: 3
    • OE.PROTECT_WORKSTATIO: 1
    • OE.PROTECT_WORKSTATIONS: 2
    • OE.REVOCATION_LIST: 3
    • OE.STRICT_USAGE: 3
    • OE.SUPER_ADMIN: 3
    • OE.TIMESTAMPS: 4
  • SA:
    • SA: 2
  • T:
    • T.ADMIN_USURP: 3
    • T.AUDIT: 2
    • T.ILLEGAL_ADMIN: 18
    • T.ILLEGAL_ADMIN_SESSION: 4
    • T.IMPROPER_USE: 11
    • T.IP_SPOOFING: 5
  • A:
    • A.CAP_FILE: 4
    • A.DELETION: 4
    • A.OS-UPDATE-EVIDENCE: 3
    • A.SECURE_ACODE_MANAGEMENT: 3
    • A.VERIFICATION: 3
  • D:
    • D.API_DATA: 3
    • D.APP_CODE: 6
    • D.APP_C_DATA: 3
    • D.APP_I_DATA: 5
    • D.APP_KEYS: 1
    • D.CRYPTO: 5
    • D.JCS_CODE: 6
    • D.JCS_DATA: 8
    • D.OS-: 1
    • D.OS-UPDATE-CODE-ID: 3
    • D.OS-UPDATE_ADDITIONALCODE: 5
    • D.OS-UPDATE_DEC-KEY: 2
    • D.OS-UPDATE_SGNVER-KEY: 2
    • D.PIN: 4
    • D.SEC_DATA: 7
  • O:
    • O.ALARM: 15
    • O.APPLET: 28
    • O.ARRAY_VIEWS_CONFID: 7
    • O.ARRAY_VIEWS_INTEG: 3
    • O.CARD-MANAGEMENT: 21
    • O.CIPHER: 11
    • O.CODE_CAP_FILE: 23
    • O.CONFID-OS-UPDATE: 4
    • O.DELETION: 4
    • O.FIREWALL: 12
    • O.GLOBAL_ARRAYS_CONFID: 9
    • O.GLOBAL_ARRAYS_INTEG: 5
    • O.INSTALL: 7
    • O.JAVAOBJECT: 68
    • O.KEY-MNGT: 6
    • O.LOAD: 11
    • O.NATIVE: 12
    • O.OBJ-DELETION: 4
    • O.OBJ_DELETION: 4
    • O.OPERATE: 15
    • O.PIN-MNGT: 6
    • O.PIN_MNGT: 4
    • O.REALLOCATION: 5
    • O.RESOURCES: 9
    • O.RND: 1
    • O.RNG: 11
    • O.SCP: 39
    • O.SECURE_AC_ACTIVATION: 5
    • O.SECURE_LOAD_ACODE: 9
    • O.SID: 13
    • O.TOE_IDENTIFICATION: 7
    • O.TRANSACTION: 6
  • OE:
    • OE.CAP_FILE: 5
    • OE.CARD-MANAGEMENT: 1
    • OE.CODE-EVIDENCE: 11
    • OE.NATIVE: 1
    • OE.OS-UPDATE-ENCRYPTION: 6
    • OE.OS-UPDATE-EVIDENCE: 3
    • OE.SCP: 6
    • OE.SECURE_ACODE_MANAGEMENT: 3
    • OE.VERIFICATION: 25
  • OP:
    • OP.ARRAY_AASTORE: 3
    • OP.ARRAY_ACCESS: 7
    • OP.ARRAY_LENGTH: 3
    • OP.ARRAY_T_ALOAD: 3
    • OP.ARRAY_T_ASTORE: 3
    • OP.CREATE: 11
    • OP.DELETE_APPLET: 6
    • OP.DELETE_CAP_FILE: 4
    • OP.DELETE_CAP_FILE_APPLET: 4
    • OP.INSTANCE_FIELD: 6
    • OP.INVK_INTERFACE: 10
    • OP.INVK_VIRTUAL: 8
    • OP.JAVA: 8
    • OP.PUT: 8
    • OP.PUTFIELD: 1
    • OP.PUTSTATIC: 1
    • OP.THROW: 7
    • OP.TYPE_ACCESS: 7
  • OSP:
    • OSP.ADDITIONAL_CODE_ENCRYPTION: 3
    • OSP.ADDITIONAL_CODE_SIGNING: 3
    • OSP.ATOMIC_ACTIVATION: 3
    • OSP.RNG: 3
    • OSP.TOE_IDENTIFICATION: 3
    • OSP.VERIFICATION: 3
  • OT:
    • OT.X: 1
  • R:
    • R.JAVA: 13
  • T:
    • T.CONFID-APPLI-DATA: 3
    • T.CONFID-JCS-CODE: 3
    • T.CONFID-JCS-DATA: 3
    • T.CONFID-OS-UPDATE_LOAD: 3
    • T.DELETION: 3
    • T.EXE-CODE: 6
    • T.FAKE-SGNVER-KEY: 3
    • T.INSTALL: 3
    • T.INTEG-APPLI-CODE: 6
    • T.INTEG-APPLI-DATA: 6
    • T.INTEG-JCS-CODE: 3
    • T.INTEG-JCS-DATA: 3
    • T.INTEG-OS-UPDATE_LOAD: 3
    • T.NATIVE: 3
    • T.OBJ-DELETION: 3
    • T.PHYSICAL: 3
    • T.RESOURCES: 3
    • T.SID: 6
    • T.UNAUTHORIZED_TOE_CODE_UPDATE: 3
    • T.WRONG-UPDATE-STATE: 3
pdf_data/st_keywords/vendor
  • Cisco:
    • Cisco: 1
  • Microsoft:
    • Microsoft: 2
  • Gemalto:
    • Gemalto: 1
  • Thales:
    • Thales: 45
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 18
    • CAST:
      • CAST: 1
  • DES:
    • DES:
      • DES: 2
  • constructions:
    • MAC:
      • HMAC: 4
  • miscellaneous:
    • Blowfish:
      • Blowfish: 1
  • AES_competition:
    • AES:
      • AES: 28
      • AES-256: 2
  • DES:
    • 3DES:
      • 3DES: 2
      • TDEA: 1
      • TDES: 12
      • Triple-DES: 3
    • DES:
      • DES: 20
  • constructions:
    • MAC:
      • CMAC: 3
      • HMAC: 3
      • KMAC: 3
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 1
    • ECDH:
      • ECDH: 5
    • ECDSA:
      • ECDSA: 11
  • FF:
    • DH:
      • DH: 6
      • Diffie-Hellman: 11
    • DSA:
      • DSA: 4
  • RSA:
    • RSA 2048: 2
  • ECC:
    • ECC:
      • ECC: 12
    • ECDH:
      • ECDH: 8
    • ECDSA:
      • ECDSA: 4
  • FF:
    • DH:
      • DH: 14
      • Diffie-Hellman: 5
pdf_data/st_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 1
  • SHA:
    • SHA2:
      • SHA-2: 2
      • SHA2: 9
  • SHA:
    • SHA1:
      • SHA-1: 4
      • SHA1: 2
    • SHA2:
      • SHA-224: 1
      • SHA-256: 2
      • SHA-384: 1
      • SHA-512: 2
      • SHA2: 1
      • SHA224: 1
    • SHA3:
      • SHA3: 2
      • SHA3-384: 1
      • SHA3-512: 1
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key Agreement: 1
  • KEX:
    • Key Exchange: 4
  • MAC:
    • MAC: 1
  • KA:
    • Key Agreement: 6
    • Key agreement: 2
  • MAC:
    • MAC: 14
pdf_data/st_keywords/crypto_protocol
  • IKE:
    • IKE: 46
    • IKEv2: 11
  • IPsec:
    • IPsec: 1
  • SSH:
    • SSH: 2
  • TLS:
    • SSL:
      • SSL: 2
    • TLS:
      • TLS: 65
      • TLS 1.2: 4
      • TLS 1.3: 5
  • VPN:
    • VPN: 98
  • PACE:
    • PACE: 165
pdf_data/st_keywords/randomness
  • PRNG:
    • PRNG: 1
  • RNG:
    • RND: 4
    • RNG: 44
pdf_data/st_keywords/cipher_mode
  • CBC:
    • CBC: 1
  • CTR:
    • CTR: 4
  • GCM:
    • GCM: 4
  • CBC:
    • CBC: 3
  • ECB:
    • ECB: 1
pdf_data/st_keywords/ecc_curve
  • NIST:
    • SECP256r1: 1
    • secp256r1: 7
    • secp384r1: 7
    • secp521r1: 5
pdf_data/st_keywords/tls_cipher_suite
  • TLS:
    • TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 1
pdf_data/st_keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • Malfunction: 6
    • Physical Tampering: 3
    • fault induction: 2
    • malfunction: 9
    • physical tampering: 1
  • SCA:
    • DPA: 2
    • Leak-Inherent: 3
    • SPA: 1
    • physical probing: 7
    • timing attacks: 1
pdf_data/st_keywords/tee_name
  • IBM:
    • SE: 2
pdf_data/st_keywords/cplc_data
  • ICFab:
    • IC Fabricator: 1
  • ICType:
    • IC Type: 1
pdf_data/st_keywords/ic_data_group
  • EF:
    • EF.DG1: 4
    • EF.DG16: 4
    • EF.DG3: 1
    • EF.DG4: 1
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
    • CCMB-2017-04-004: 1
  • FIPS:
    • FIPS 180-1: 1
    • FIPS 180-2: 1
    • FIPS PUB 186-4: 1
    • FIPS PUB 197: 1
  • ISO:
    • ISO/IEC 14888-3: 1
  • PKCS:
    • PKCS #1: 1
  • RFC:
    • RFC 1034: 1
    • RFC 1035: 1
    • RFC 1058: 1
    • RFC 1349: 1
    • RFC 2104: 1
    • RFC 2246: 1
    • RFC 2385: 1
    • RFC 2389: 1
    • RFC 2401: 2
    • RFC 2409: 2
    • RFC 2428: 1
    • RFC 2453: 1
    • RFC 2474: 1
    • RFC 2518: 1
    • RFC 2577: 1
    • RFC 2616: 1
    • RFC 2631: 1
    • RFC 2817: 1
    • RFC 2818: 5
    • RFC 2986: 4
    • RFC 3253: 1
    • RFC 3261: 1
    • RFC 3268: 1
    • RFC 3330: 1
    • RFC 3376: 1
    • RFC 3435: 1
    • RFC 3526: 1
    • RFC 3550: 1
    • RFC 3605: 1
    • RFC 4303: 1
    • RFC 4754: 1
    • RFC 4960: 1
    • RFC 5246: 6
    • RFC 5273: 1
    • RFC 5280: 1
    • RFC 5282: 1
    • RFC 5639: 1
    • RFC 5652: 1
    • RFC 5903: 1
    • RFC 6125: 3
    • RFC 6455: 1
    • RFC 6932: 1
    • RFC 7030: 17
    • RFC 7427: 1
    • RFC 768: 1
    • RFC 792: 1
    • RFC 793: 1
    • RFC 8446: 5
    • RFC 959: 1
  • X509:
    • X.509: 27
  • BSI:
    • AIS20: 1
    • AIS31: 6
    • BSI-AIS31: 1
  • CC:
    • CCMB-2017-04-001: 1
    • CCMB-2017-04-002: 1
    • CCMB-2017-04-003: 1
  • FIPS:
    • FIPS 197: 1
    • FIPS180-4: 2
    • FIPS197: 5
    • FIPS202: 2
  • ICAO:
    • ICAO: 3
  • NIST:
    • SP 800-67: 1
  • PKCS:
    • PKCS#1: 7
    • PKCS#5: 5
  • SCP:
    • SCP01: 4
    • SCP02: 4
    • SCP03: 5
pdf_data/st_keywords/javacard_version
  • JavaCard:
    • Java Card 3.1: 8
pdf_data/st_keywords/javacard_api_const
  • curves:
    • SECP256R1: 1
  • misc:
    • TYPE_ACCESS: 7
pdf_data/st_keywords/javacard_packages
  • com:
    • com.gemalto.belpic: 1
    • com.gemalto.javacard.eid: 1
    • com.gemalto.javacard.fido.ctap: 1
    • com.gemalto.javacard.iasclassic: 1
    • com.gemalto.javacard.mspnp: 1
    • com.gemalto.javacardx.gdp: 1
    • com.gemalto.moc.client: 1
    • com.gemalto.moc.server: 1
    • com.gemalto.mpcos: 1
    • com.gemalto.puredi: 1
    • com.gemalto.tacho: 1
  • java:
    • java.lang: 1
  • javacard:
    • javacard.eid: 1
    • javacard.fido.ctap: 1
    • javacard.framework: 3
    • javacard.iasclassic: 1
    • javacard.mspnp: 1
  • javacardx:
    • javacardx.gdp: 1
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • out of scope: 1
    • protocol, the connection is set up by the web browser on the administration workstation which is out of scope. Likewise the TLS protocol itself is outside the scope of this evaluation. Rationale: the trusted: 1
  • OutOfScope:
    • • The DELETE and INSTALL APDU commands are out of scope of this SPM: 1
    • 1 : MultiApp v5.1 Rev. B with biometry features but forbidden to use without patch (biometry is out of scope of the TOE) 2. Config 2 : MultiApp v5.1 Rev. C with biometry features but forbidden to use without: 1
    • 1, are out of the scope of the SPM as they are linked to the applet loading or deletion that is out of scope of the SPM boundaries limited to VM opcodes The SFR FMT_MTD.3/JCRE is out of scope of the SPM: 1
    • Context, the Selected Applet Context, and the Active Applets Note: the Selected Applet context is out of scope of the VM functionalities. It is a process that occurs prior to VM start The initial setting of: 1
    • a timeout policy that prevent them from being blocked should a card fails to answer. That point is out of scope of this Security Target, though. Finally, the objectives O.SCP.RECOVERY and O.SCP.SUPPORT are: 1
    • and deletion; see #.DELETION and #.INSTALL). • The DELETE and INSTALL APDU commands are out of scope of this SPM. The list of registred applets’ AIDs is proven to be not modified during the execution: 1
    • as a null reference. Such a mechanism is implementation-dependent. The deletion of applets is out of scope of this SPM scope. In the case of an array type, fields are components of the array ([JVM], §2.14: 1
    • because AID registry is created during loading phase, which is also out of scope of the SPM (Hypothesis 2 of the SPM document [MAV51_SPM]). MultiApp V5.1: JCS Security Target ST: 1
    • biometry is out of scope of the TOE: 2
    • biometry is out of scope of the TOE) 3. Config 3 : MultiApp v5.1 Rev. B with biometry features included in the TOE (Upgraded: 1
    • filter set = 0x00 and 0x10) no patch is loaded and Biometry feature is out of scope of the TOE: 1
    • for 2 others configurations (filter set = 0x00 and 0x10) no patch is loaded and Biometry feature is out of scope of the TOE. If another patch is required in the future, it would require at least a maintenance of: 1
    • in §1.3, Filter set field = 0X00 Rev. C with patch or 0X10 Rev. C with patch), we consider BioPIN out of scope of the TOE: 1
    • in §1.3, Filter set field = 0X00 Rev. C with patch or 0X10 Rev. C with patch), we consider BioPIN out of scope of the TOE. 2.4 TOE DESCRIPTION 2.4.1 Architecture The MultiApp V5.1 platform is an operating: 1
    • is also out of scope (Hypothesis 4 of the SPM document [MAV51_SPM]).. 3) S.CAP_FILE performing OP.ARRAY_AASTORE of the: 1
    • out of scope: 13
    • the active context is not the same as the Selected Applet Context. Application note: This rule is out of scope of the SPM modelisation because CLEAR_ON_DESELECT objects can be created exclusively in the API: 1
pdf_data/st_metadata
  • /Author: Stormshield
  • /CreationDate: D:20230808085705+02'00'
  • /Creator: Microsoft® Word 2019
  • /ModDate: D:20230808085705+02'00'
  • /Producer: Microsoft® Word 2019
  • /Subject: UTM / NG-Firewall Software Suite
  • /Title: Stormshield Network Security
  • pdf_file_size_bytes: 2008885
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 107
  • /CreationDate: D:20251211164905+01'00'
  • /Creator: Microsoft® Word for Microsoft 365
  • /MSIP_Label_c6c1d335-5221-4a6a-889f-c684b2c8474c_ActionId: f58ac3a4-cc4c-4041-89a2-6ca192dcfb3a
  • /MSIP_Label_c6c1d335-5221-4a6a-889f-c684b2c8474c_ContentBits: 3
  • /MSIP_Label_c6c1d335-5221-4a6a-889f-c684b2c8474c_Enabled: true
  • /MSIP_Label_c6c1d335-5221-4a6a-889f-c684b2c8474c_Method: Privileged
  • /MSIP_Label_c6c1d335-5221-4a6a-889f-c684b2c8474c_Name: DIS Limited Distribution Scope
  • /MSIP_Label_c6c1d335-5221-4a6a-889f-c684b2c8474c_SetDate: 2025-09-18T16:02:23Z
  • /MSIP_Label_c6c1d335-5221-4a6a-889f-c684b2c8474c_SiteId: 6e603289-5e46-4e26-ac7c-03a85420a9a5
  • /ModDate: D:20251211164905+01'00'
  • /Producer: Microsoft® Word for Microsoft 365
  • pdf_file_size_bytes: 4460503
  • pdf_hyperlinks: https://www.ssi.gouv.fr/uploads/2021/03/anssi-guide-mecanismes_crypto-2.04.pdf
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 156
state/cert/pdf_hash Different Different
state/cert/txt_hash Different Different
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different