This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	UTM / NG-Firewall Software Suite (4.3.12.2 (S, M, XL)) ( ANSSI-CC-2023/62 ) ANSSI-CC-2023/62	Produit IAS Classic v5.2.1 with MOC Server v3.1 on MultiApp V5.1 Version 5.2.1.A.C et 5.2.1.A.O ( ANSSI-CC-2023/42 ) ANSSI-CC-2023/42
name	UTM / NG-Firewall Software Suite (4.3.12.2 (S, M, XL)) ( ANSSI-CC-2023/62 )	Produit IAS Classic v5.2.1 with MOC Server v3.1 on MultiApp V5.1 Version 5.2.1.A.C et 5.2.1.A.O ( ANSSI-CC-2023/42 )
category	ICs, Smart Cards and Smart Card-Related Devices and Systems	ICs, Smart Cards and Smart Card-Related Devices and Systems
scheme	FR	FR
status	active	active
not_valid_after	08.12.2028	29.09.2028
not_valid_before	28.12.2023	29.09.2023
cert_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/certificat-CC-2023_62fr.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/Certificat-CC-2023_42fr.pdf
report_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2023_62fr.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2023_42fr.pdf
st_link	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-cible-2023_62en.pdf	https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-cible-2023_42en.pdf
manufacturer	Stormshield	THALES DIS FRANCE SA
manufacturer_web	https://www.stormshield.eu/	https://www.thalesgroup.com/en/europe/france
security_level	EAL4+, ALC_FLR.3	AVA_VAN.5, ALC_DVS.2, EAL5+
dgst	91aa10edaf1efbcf	5f61ebf23c6ad99d
heuristics/cert_id	ANSSI-CC-2023/62	ANSSI-CC-2023/42
heuristics/cert_lab	[]	[]
heuristics/cpe_matches	{}	{}
heuristics/verified_cpe_matches	{}	{}
heuristics/related_cves	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/indirect_transitive_cves	{}	{}
heuristics/extracted_sars	ASE_INT.1, ASE_ECD.1, ALC_TAT.1, ATE_FUN.1, ALC_DVS.1, ADV_IMP.1, ASE_TSS.1, AGD_PRE.1, ASE_CCL.1, ALC_CMS.4, ASE_SPD.1, ASE_OBJ.2, ADV_FSP.4, ATE_COV.2, ASE_REQ.2, ALC_CMC.4, ADV_ARC.1, ALC_FLR.3, AVA_VAN.3, ATE_DPT.1, ADV_TDS.3, ALC_DEL.1, AGD_OPE.1, ALC_LCD.1, ATE_IND.2	ALC_DVS.2, AVA_VAN.5
heuristics/extracted_versions	4.3.12.2	5.1, 3.1, 5.2.1
heuristics/prev_certificates	{}	{}
heuristics/next_certificates	{}	{}
heuristics/report_references/directly_referenced_by	{}	{}
heuristics/report_references/directly_referencing	{}	ANSSI-CC-2023/01, ANSSI-CC-2023/31
heuristics/report_references/indirectly_referenced_by	{}	{}
heuristics/report_references/indirectly_referencing	{}	ANSSI-CC-2023/01, ANSSI-CC-2023/31
heuristics/scheme_data	cert_id: ANSSI-CC-2023/62 description: Le produit évalué est « UTM / NG-Firewall Software Suite, 4.3.12.2 (S, M, XL » développé par STORMSHIELD et exécuté par les appliances STORMSHIELD suivantes : SN210, SN310, SN510, SN710, SN910, SN1100, SN2000, SN2100, SN3000, SN3100, SN6000, SN6100, SNi40, et SNi20. Ce produit permet d’interconnecter un ou plusieurs réseaux de confiance via un réseau non maitrisé sans dégrader le niveau de confia developer: STORMSHIELD enhanced: augmented: ALC_FLR.3 category: Produits réseau cc_version: Critères Communs version 3.1r5 cert_id: ANSSI-CC-2023/62 cert_link: https://cyber.gouv.fr/sites/default/files/document_type/certificat-CC-2023_62fr.pdf certification_date: 08.12.2023 developer: STORMSHIELD evaluation_facility: OPPIDA expiration_date: 08.12.2028 level: EAL4+ mutual_recognition: CCRA SOG-IS protection_profile: report_link: https://cyber.gouv.fr/sites/default/files/document_type/ANSSI-CC-2023_62fr.pdf sponsor: STORMSHIELD expiration_date: 08.12.2028 level: EAL4+ product: UTM / NG-Firewall Software Suite version 4.3.12.2 (S, M, XL) sponsor: STORMSHIELD url: https://cyber.gouv.fr/produits-certifies/utm-ng-firewall-software-suite-version-43122-s-m-xl	cert_id: ANSSI-CC-2023/42 description: Le produit évalué est l’application « IAS Classic v5.2.1 with MOC Server v3.1 on MultiApp V5.1, Versions 5.2.1.A.C et 5.2.1.A.O » développée par THALES DIS FRANCE SAS et embarquée sur le microcontrôleur AQUARIUS_BA_09 fabriqué par THALES DIS. Ce produit est destiné à être utilisé comme dispositif sécurisé de création de signature (SSCD).     developer: THALES DIS enhanced: augmented: ALC_DVS.2, AVA_VAN.5 category: Cartes à puce cc_version: Critères Communs version 3.1r5 cert_id: ANSSI-CC-2023/42 cert_link: https://cyber.gouv.fr/sites/default/files/document_type/Certificat-CC-2023_42fr.pdf certification_date: 22.09.2023 developer: THALES DIS evaluation_facility: CEA - LETI expiration_date: 22.09.2028 level: EAL5+ mutual_recognition: CCRA SOG-IS protection_profile: Protection profiles for secure signature creation device : Part 2: Device with key generation, v2.01, BSI-CC-PP-0059-2009-MA-02 Part 3: Device with key import, v1.0.2, BSI-CC-PP-0075-2012-MA-01 Part 4: Extension for device with key generation and trusted channel to certificate generation application, v1.0.1, BSI-CC-PP-0071-2012-MA-01 Part5: Extension for device with key generation and trusted communication with signature-creation application, v1.0.1, BSI-CC-PP-0072-2012-MA-01 Part 6: Extension for device with key import and trusted channel to signature creation application, v1.0.4, BSI-CC-PP-0076-2013-MA-01 sponsor: THALES DIS expiration_date: 22.09.2028 level: EAL5+ product: IAS Classic v5.2.1 with MOC Server v3.1 on MultiApp V5.1 (Versions 5.2.1.A.C et 5.2.1.A.O) sponsor: THALES DIS url: https://cyber.gouv.fr/produits-certifies/ias-classic-v521-moc-server-v31-multiapp-v51-versions-521ac-et-521ao
heuristics/st_references/directly_referenced_by	{}	{}
heuristics/st_references/directly_referencing	{}	{}
heuristics/st_references/indirectly_referenced_by	{}	{}
heuristics/st_references/indirectly_referencing	{}	{}
maintenance_updates		maintenance_date: 04.04.2024 maintenance_report_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-CC-2023_42-M01fr.pdf maintenance_st_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ANSSI-cible-CC-2023_42-M01en.pdf maintenance_title: ANSSI-CC-2023/42-M01
protection_profiles		pp_eal: None pp_ids: {} pp_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0059b_pdf.pdf pp_name: Protection Profile for Secure Signature Creation Device - Part 2: Device with Key Generation, Version... pp_eal: None pp_ids: {} pp_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0072b_pdf.pdf pp_name: Protection profiles for secure signature creation device — Part 5: Extension for device with key gene... pp_eal: None pp_ids: {} pp_link: https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp0076b_pdf.pdf pp_name: Protection profiles for secure signature creation device - Part 6: Extension for device with key impo... pp_eal: EAL4+ pp_ids: PP_SSCD_PART3_V1.0.2 pp_link: https://www.commoncriteriaportal.org/files/ppfiles/pp0075b_pdf.pdf pp_name: Protection profiles for secure signature creation device - Part 3: Device with key import
pdf_data/cert_filename	certificat-CC-2023_62fr.pdf	Certificat-CC-2023_42fr.pdf
pdf_data/cert_frontpage
pdf_data/cert_keywords/cc_cert_id	FR: ANSSI-CC-2023/62: 2	FR: ANSSI-CC-2023/42: 2
pdf_data/cert_keywords/cc_protection_profile_id		BSI: BSI-CC-PP-0059-2009-MA-02: 1 BSI-CC-PP-0071-2012-MA-01: 1 BSI-CC-PP-0072-2012-MA-01: 1 BSI-CC-PP-0075-2012-MA-01: 1 BSI-CC-PP-0076-2013-MA-01: 1
pdf_data/cert_keywords/cc_security_level	EAL: EAL2: 1 EAL4: 1	EAL: EAL2: 1 EAL5: 1
pdf_data/cert_keywords/cc_sar	ALC: ALC_FLR.3: 2	ALC: ALC_DVS.2: 1 AVA: AVA_VAN.5: 1
pdf_data/cert_keywords/cc_sfr
pdf_data/cert_keywords/cc_claims		A: A.C: 1 A.O: 1
pdf_data/cert_keywords/vendor
pdf_data/cert_keywords/eval_facility	OPPIDA: OPPIDA: 2	CEA-LETI: CEA - LETI: 2
pdf_data/cert_keywords/symmetric_crypto
pdf_data/cert_keywords/asymmetric_crypto
pdf_data/cert_keywords/pq_crypto
pdf_data/cert_keywords/hash_function
pdf_data/cert_keywords/crypto_scheme
pdf_data/cert_keywords/crypto_protocol
pdf_data/cert_keywords/randomness
pdf_data/cert_keywords/cipher_mode
pdf_data/cert_keywords/ecc_curve
pdf_data/cert_keywords/crypto_engine
pdf_data/cert_keywords/tls_cipher_suite
pdf_data/cert_keywords/crypto_library
pdf_data/cert_keywords/vulnerability
pdf_data/cert_keywords/side_channel_analysis
pdf_data/cert_keywords/technical_report_id
pdf_data/cert_keywords/device_model
pdf_data/cert_keywords/tee_name
pdf_data/cert_keywords/os_name
pdf_data/cert_keywords/cplc_data
pdf_data/cert_keywords/ic_data_group
pdf_data/cert_keywords/standard_id
pdf_data/cert_keywords/javacard_version
pdf_data/cert_keywords/javacard_api_const
pdf_data/cert_keywords/javacard_packages
pdf_data/cert_keywords/certification_process
pdf_data/cert_metadata	/CreationDate: D:20240213165128+01'00' /Creator: Acrobat PDFMaker 23 pour Word /Keywords: /ModDate: D:20240213165313+01'00' /Producer: Adobe PDF Library 23.1.175 pdf_file_size_bytes: 130702 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 2	/CreationDate: D:20230929173949+02'00' /Creator: Acrobat PDFMaker 23 pour Word /Keywords: /ModDate: D:20230929174206+02'00' /Producer: Adobe PDF Library 23.1.175 pdf_file_size_bytes: 158885 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 2
pdf_data/report_filename	ANSSI-CC-2023_62fr.pdf	ANSSI-CC-2023_42fr.pdf
pdf_data/report_frontpage	FR:	FR:
pdf_data/report_keywords/cc_cert_id	FR: ANSSI-CC-2023/62: 2	FR: ANSSI-CC-2023/01: 2 ANSSI-CC-2023/31: 3 ANSSI-CC-2023/42: 2
pdf_data/report_keywords/cc_protection_profile_id		BSI: BSI-CC-PP-0059-2009-MA-02: 2 BSI-CC-PP-0071-2012-MA-01: 2 BSI-CC-PP-0072-2012-MA-01: 2 BSI-CC-PP-0075-2012-MA-01: 2 BSI-CC-PP-0076-2013-MA-01: 2 other: PP-SSCD-: 1 PP-SSCD-Part2: 2 PP-SSCD-Part3: 2 PP-SSCD-Part4: 2 PP-SSCD-Part5: 2 PP-SSCD-Part6: 1
pdf_data/report_keywords/cc_security_level	EAL: EAL2: 3 EAL4: 2 EAL4+: 1 ITSEC: ITSEC E3 Elémentaire: 1	EAL: EAL2: 2 EAL5: 1 EAL7: 1 ITSEC: ITSEC E6 Elevé: 1
pdf_data/report_keywords/cc_sar	ALC: ALC_FLR: 1 ALC_FLR.3: 3	AGD: AGD_OPE: 1 AGD_PRE: 1 ALC: ALC_DVS.2: 1 ALC_FLR: 1 AVA: AVA_VAN: 1 AVA_VAN.5: 1
pdf_data/report_keywords/cc_sfr
pdf_data/report_keywords/cc_claims		A: A.C: 4 A.O: 4
pdf_data/report_keywords/vendor		Gemalto: Gemalto: 1
pdf_data/report_keywords/eval_facility	CESTI: CESTI: 1 OPPIDA: OPPIDA: 1	CEA-LETI: CEA - LETI: 1 CESTI: CESTI: 3
pdf_data/report_keywords/symmetric_crypto	DES: DES: DES: 1	DES: DES: DES: 1
pdf_data/report_keywords/asymmetric_crypto
pdf_data/report_keywords/pq_crypto
pdf_data/report_keywords/hash_function
pdf_data/report_keywords/crypto_scheme
pdf_data/report_keywords/crypto_protocol
pdf_data/report_keywords/randomness
pdf_data/report_keywords/cipher_mode
pdf_data/report_keywords/ecc_curve
pdf_data/report_keywords/crypto_engine
pdf_data/report_keywords/tls_cipher_suite
pdf_data/report_keywords/crypto_library
pdf_data/report_keywords/vulnerability
pdf_data/report_keywords/side_channel_analysis
pdf_data/report_keywords/technical_report_id
pdf_data/report_keywords/device_model
pdf_data/report_keywords/tee_name
pdf_data/report_keywords/os_name
pdf_data/report_keywords/cplc_data
pdf_data/report_keywords/ic_data_group
pdf_data/report_keywords/standard_id	CC: CCMB-2017-04-001: 1 CCMB-2017-04-002: 1 CCMB-2017-04-003: 1	CC: CCMB-2017-04-001: 1 CCMB-2017-04-002: 1 CCMB-2017-04-003: 1
pdf_data/report_keywords/javacard_version
pdf_data/report_keywords/javacard_api_const
pdf_data/report_keywords/javacard_packages
pdf_data/report_keywords/certification_process
pdf_data/report_metadata	/CreationDate: D:20240213164647+01'00' /Creator: Acrobat PDFMaker 23 pour Word /Keywords: /ModDate: D:20240213165310+01'00' /Producer: Adobe PDF Library 23.1.175 pdf_file_size_bytes: 328180 pdf_hyperlinks: http://www.sogis.eu/, mailto:[email protected], http://www.ssi.gouv.fr/, http://www.commoncriteriaportal.org/ pdf_is_encrypted: False pdf_number_of_pages: 12	/CreationDate: D:20230929174115+02'00' /Creator: Acrobat PDFMaker 23 pour Word /Keywords: /ModDate: D:20230929174205+02'00' /Producer: Adobe PDF Library 23.1.175 pdf_file_size_bytes: 540883 pdf_hyperlinks: http://www.sogis.eu/, mailto:[email protected], http://www.ssi.gouv.fr/, http://www.commoncriteriaportal.org/ pdf_is_encrypted: False pdf_number_of_pages: 16
pdf_data/st_filename	ANSSI-cible-2023_62en.pdf	ANSSI-cible-2023_42en.pdf
pdf_data/st_frontpage
pdf_data/st_keywords/cc_cert_id	NL: CC-01: 3 CC-02: 6 CC-03: 4	NL: CC-1: 2 CC-2: 2 CC-3: 3
pdf_data/st_keywords/cc_protection_profile_id		BSI: BSI-CC-PP-0059-2009-MA-02: 1 BSI-CC-PP-0071-2012-MA-01: 1 BSI-CC-PP-0072-2012-MA-01: 1 BSI-CC-PP-0075-2012-MA-01: 1 BSI-CC-PP-0076-2013-MA-01: 1 BSI-CC-PP-0099-V2-2020: 1 other: PP-SSCD: 4 PP-SSCD-KG: 37 PP-SSCD-KI: 28
pdf_data/st_keywords/cc_security_level	EAL: EAL4: 28 EAL4 augmented: 2 EAL4+: 2	EAL: EAL 5+: 1 EAL5: 3 EAL5 augmented: 1 EAL5+: 1
pdf_data/st_keywords/cc_sar	ADV: ADV_ARC.1: 1 ADV_FSP.4: 1 ADV_IMP.1: 1 ADV_TDS.3: 1 AGD: AGD_OPE.1: 1 AGD_PRE.1: 1 ALC: ALC_CMC.4: 1 ALC_CMS.4: 1 ALC_DEL.1: 1 ALC_DVS.1: 1 ALC_FLR.3: 6 ALC_LCD.1: 1 ALC_TAT.1: 1 ASE: ASE_CCL.1: 1 ASE_ECD.1: 1 ASE_INT.1: 1 ASE_OBJ.2: 1 ASE_REQ.2: 3 ASE_SPD.1: 1 ASE_TSS.1: 1 ATE: ATE_COV.2: 1 ATE_DPT.1: 1 ATE_FUN.1: 1 ATE_IND.2: 1 AVA: AVA_VAN.3: 1	ALC: ALC_DVS.2: 3 AVA: AVA_VAN.5: 3
pdf_data/st_keywords/cc_sfr	FAU: FAU_ARP: 2 FAU_ARP.1: 7 FAU_ARP.1.1: 1 FAU_GEN: 4 FAU_GEN.1: 6 FAU_GEN.1.1: 2 FAU_GEN.1.2: 4 FAU_GEN.2: 6 FAU_GEN.2.1: 2 FAU_SAA.1: 1 FAU_SAA.4: 9 FAU_SAA.4.1: 4 FAU_SAA.4.2: 2 FAU_SAA.4.3: 3 FAU_SAR.1: 7 FAU_SAR.1.1: 2 FAU_SAR.1.2: 2 FAU_STG.3: 7 FAU_STG.3.1: 2 FCS: FCS_CKM: 1 FCS_CKM.1: 24 FCS_CKM.4: 19 FCS_COP.1: 61 FCS_TLSC_EXT.1: 25 FCS_TLSC_EXT.1.1: 3 FCS_TLSC_EXT.1.2: 3 FCS_TLSC_EXT.1.5: 3 FDP: FDP_ACC.1: 2 FDP_ACC.2: 6 FDP_ACC.2.1: 2 FDP_ACC.2.2: 2 FDP_IFC.1: 10 FDP_IFC.1.1: 2 FDP_IFC.2: 6 FDP_IFC.2.1: 3 FDP_IFC.2.2: 2 FDP_IFF.1: 29 FDP_IFF.1.1: 2 FDP_IFF.1.2: 2 FDP_IFF.1.3: 2 FDP_IFF.1.4: 2 FDP_IFF.1.5: 2 FDP_ITC.1: 8 FDP_ITC.2: 8 FDP_UCT.1: 12 FDP_UCT.1.1: 2 FDP_UIT.1: 12 FDP_UIT.1.1: 2 FDP_UIT.1.2: 2 FIA: FIA_UAU.5: 77 FIA_UAU.5.1: 5 FIA_UAU.5.2: 5 FIA_UID.1: 2 FMT: FMT_MOF.1: 10 FMT_MOF.1.1: 3 FMT_MSA.3: 2 FMT_MTD: 23 FMT_MTD.1: 11 FMT_MTD.1.1: 3 FMT_SMF: 1 FMT_SMF.1: 12 FMT_SMF.1.1: 2 FMT_SMR.1: 8 FMT_SMR.1.1: 3 FMT_SMR.1.2: 4 FPT: FPT_ITT.1: 10 FPT_ITT.1.1: 2 FPT_STM.1: 1 FPT_TDC.1: 8 FPT_TDC.1.1: 2 FPT_TDC.1.2: 2 FTP: FTP_ITC.1: 2 FTP_ITT.1: 1 FTP_TRP.1: 74 FTP_TRP.1.1: 5 FTP_TRP.1.2: 5 FTP_TRP.1.3: 5	FAU: FAU_ARP.1: 1 FCO: FCO_NRO: 1 FCS: FCS_CKM: 59 FCS_CKM.1: 10 FCS_CKM.1.1: 2 FCS_CKM.2: 3 FCS_CKM.3: 1 FCS_CKM.4: 12 FCS_CKM.4.1: 2 FCS_COP: 35 FCS_COP.1: 6 FCS_COP.1.1: 2 FCS_RNG: 1 FCS_RNG.1: 2 FDP: FDP_ACC: 55 FDP_ACC.1: 27 FDP_ACC.1.1: 4 FDP_ACF: 43 FDP_ACF.1: 9 FDP_ACF.1.1: 4 FDP_ACF.1.2: 4 FDP_ACF.1.3: 4 FDP_ACF.1.4: 4 FDP_AFC: 1 FDP_DAU: 11 FDP_DAU.1: 1 FDP_DAU.2.1: 1 FDP_DAU.2.2: 1 FDP_IFC: 2 FDP_IFC.1: 9 FDP_IFF: 2 FDP_ITC: 11 FDP_ITC.1: 9 FDP_ITC.1.1: 1 FDP_ITC.1.2: 1 FDP_ITC.2: 8 FDP_RIP: 6 FDP_RIP.1: 17 FDP_RIP.1.1: 1 FDP_SDI: 22 FDP_SDI.1: 2 FDP_SDI.2: 4 FDP_UCT: 11 FDP_UCT.1: 1 FDP_UIT: 10 FDP_UIT.1: 2 FIA: FIA_AFL: 20 FIA_AFL.1: 4 FIA_API: 5 FIA_API.1: 14 FIA_API.1.1: 2 FIA_ATD: 2 FIA_UAU: 28 FIA_UAU.1: 8 FIA_UAU.1.1: 1 FIA_UAU.1.2: 1 FIA_UID: 25 FIA_UID.1: 14 FIA_USB: 1 FMT: FMT_LIM: 2 FMT_MOF.1: 9 FMT_MOF.1.1: 1 FMT_MSA: 80 FMT_MSA.1: 10 FMT_MSA.2: 9 FMT_MSA.2.1: 1 FMT_MSA.3: 15 FMT_MSA.4: 3 FMT_MTD: 25 FMT_MTD.1: 3 FMT_SMF: 6 FMT_SMF.1: 27 FMT_SMF.1.1: 1 FMT_SMR: 7 FMT_SMR.1: 36 FMT_SMR.1.1: 1 FMT_SMR.1.2: 1 FPR: FPR_UNO: 1 FPR_UNO.1: 1 FPT: FPT_EMS: 5 FPT_EMS.1: 14 FPT_EMS.1.1: 4 FPT_EMS.1.2: 3 FPT_FLS: 6 FPT_FLS.1: 13 FPT_FLS.1.1: 1 FPT_PHP.1: 8 FPT_PHP.1.1: 1 FPT_PHP.1.2: 1 FPT_PHP.3: 11 FPT_PHP.3.1: 1 FPT_RCV: 2 FPT_TST: 2 FPT_TST.1: 14 FPT_TST.1.1: 1 FPT_TST.1.2: 1 FPT_TST.1.3: 1 FTP: FTP_ITC: 42 FTP_ITC.1: 16 FTP_TRP: 1 FTP_TRP.1: 4
pdf_data/st_keywords/cc_claims	O: O.BACKUP_RESTORATION: 6 O.CRYPTO: 6 O.IPS_ATTACK_DETECTION: 8 O.IPS_RFC_COMPLIANCE: 7 O.LAA_IPS: 8 O.LAA_PCAOA: 12 O.LAA_PCFI: 6 O.PCAOA: 13 O.PCFI_APPLICATION_CONTEXT: 4 O.PCFI_ENCRYPTION: 18 O.PCFI_FILTERING: 7 O.PROTECT_ADMIN_SESSIONS: 6 O.PROTECT_LOGS: 6 O.RESIST_AUTH_ADMIN: 6 OE: OE.AUTONOMOUS: 3 OE.CRYPTO_EXT: 4 OE.ENROLLMENT: 3 OE.GOOD_PCFI: 3 OE.INTERPOSITION: 4 OE.PASSWORD: 3 OE.PERSONNEL: 3 OE.PROTECT_APPLIANCES: 3 OE.PROTECT_VPN_CLIENTS: 3 OE.PROTECT_VPN_PEER: 3 OE.PROTECT_WORKSTATIO: 1 OE.PROTECT_WORKSTATIONS: 2 OE.REVOCATION_LIST: 3 OE.STRICT_USAGE: 3 OE.SUPER_ADMIN: 3 OE.TIMESTAMPS: 4 SA: SA: 2 T: T.ADMIN_USURP: 3 T.AUDIT: 2 T.ILLEGAL_ADMIN: 18 T.ILLEGAL_ADMIN_SESSION: 4 T.IMPROPER_USE: 11 T.IP_SPOOFING: 5	A: A.C: 5 A.CAP_FILE: 4 A.CGA: 3 A.CSP: 3 A.O: 5 A.SCA: 3 A.VERIFICATION: 4 O: O.ALARM: 1 O.ARRAY_VIEWS_CONFID: 1 O.CARD-MANAGEMENT: 1 O.CIPHER: 1 O.CONFID-OS-UPDATE: 2 O.DELETION: 1 O.FIREWALL: 1 O.GLOBAL_ARRAYS_CONFID: 1 O.GLOBAL_ARRAYS_INTEG: 1 O.INSTALL: 1 O.KEY-MNGT: 1 O.LOAD: 1 O.NATIVE: 1 O.OBJ-DELETION: 1 O.OPERATE: 1 O.PIN-MNGT: 1 O.REALLOCATION: 1 O.RESOURCES: 1 O.RNG: 1 O.SCP: 3 O.SECURE_AC_ACTIVATION: 2 O.SECURE_LOAD_ACODE: 2 O.SID: 1 O.TOE_IDENTIFICATION: 1 O.TRANSACTION: 1 OE: OE.CAP_FILE: 5 OE.CARD-MANAGEMENT: 1 OE.CODE-EVIDENCE: 5 OE.HID_VAD: 3 OE.PERSONALISATION: 2 OE.PROT_LOGICAL_DATA: 1 OE.SCP: 2 OE.TERMINAL: 2 OE.USER_OBLIGATIONS: 1 OE.VERIFICATION: 7
pdf_data/st_keywords/vendor	Cisco: Cisco: 1 Microsoft: Microsoft: 2	Thales: Thales: 75
pdf_data/st_keywords/eval_facility
pdf_data/st_keywords/symmetric_crypto	AES_competition: AES: AES: 18 CAST: CAST: 1 DES: DES: DES: 2 constructions: MAC: HMAC: 4 miscellaneous: Blowfish: Blowfish: 1	AES_competition: AES: AES: 6 DES: 3DES: TDES: 4 DES: DES: 1
pdf_data/st_keywords/asymmetric_crypto	ECC: ECC: ECC: 1 ECDH: ECDH: 5 ECDSA: ECDSA: 11 FF: DH: DH: 6 Diffie-Hellman: 11 DSA: DSA: 4 RSA: RSA 2048: 2	ECC: ECC: ECC: 2 ECDH: ECDH: 1 ECDSA: ECDSA: 1 FF: DH: DH: 2 Diffie-Hellman: 2
pdf_data/st_keywords/pq_crypto
pdf_data/st_keywords/hash_function	MD: MD5: MD5: 1 SHA: SHA2: SHA-2: 2 SHA2: 9
pdf_data/st_keywords/crypto_scheme	KA: Key Agreement: 1 KEX: Key Exchange: 4 MAC: MAC: 1	MAC: MAC: 3
pdf_data/st_keywords/crypto_protocol	IKE: IKE: 46 IKEv2: 11 IPsec: IPsec: 1 SSH: SSH: 2 TLS: SSL: SSL: 2 TLS: TLS: 65 TLS 1.2: 4 TLS 1.3: 5 VPN: VPN: 98	PACE: PACE: 16
pdf_data/st_keywords/randomness		RNG: RND: 1 RNG: 3
pdf_data/st_keywords/cipher_mode	CBC: CBC: 1 CTR: CTR: 4 GCM: GCM: 4
pdf_data/st_keywords/ecc_curve	NIST: SECP256r1: 1 secp256r1: 7 secp384r1: 7 secp521r1: 5
pdf_data/st_keywords/crypto_engine
pdf_data/st_keywords/tls_cipher_suite	TLS: TLS_DHE_RSA_WITH_AES_128_CBC_SHA: 1
pdf_data/st_keywords/crypto_library	OpenSSL: OpenSSL: 1
pdf_data/st_keywords/vulnerability
pdf_data/st_keywords/side_channel_analysis		FI: DFA: 1 fault induction: 1 fault injection: 1 physical tampering: 4 SCA: DPA: 1 SPA: 1 timing attacks: 1
pdf_data/st_keywords/technical_report_id
pdf_data/st_keywords/device_model
pdf_data/st_keywords/tee_name
pdf_data/st_keywords/os_name
pdf_data/st_keywords/cplc_data
pdf_data/st_keywords/ic_data_group
pdf_data/st_keywords/standard_id	CC: CCMB-2017-04-001: 1 CCMB-2017-04-002: 1 CCMB-2017-04-003: 1 CCMB-2017-04-004: 1 FIPS: FIPS 180-1: 1 FIPS 180-2: 1 FIPS PUB 186-4: 1 FIPS PUB 197: 1 ISO: ISO/IEC 14888-3: 1 PKCS: PKCS #1: 1 RFC: RFC 1034: 1 RFC 1035: 1 RFC 1058: 1 RFC 1349: 1 RFC 2104: 1 RFC 2246: 1 RFC 2385: 1 RFC 2389: 1 RFC 2401: 2 RFC 2409: 2 RFC 2428: 1 RFC 2453: 1 RFC 2474: 1 RFC 2518: 1 RFC 2577: 1 RFC 2616: 1 RFC 2631: 1 RFC 2817: 1 RFC 2818: 5 RFC 2986: 4 RFC 3253: 1 RFC 3261: 1 RFC 3268: 1 RFC 3330: 1 RFC 3376: 1 RFC 3435: 1 RFC 3526: 1 RFC 3550: 1 RFC 3605: 1 RFC 4303: 1 RFC 4754: 1 RFC 4960: 1 RFC 5246: 6 RFC 5273: 1 RFC 5280: 1 RFC 5282: 1 RFC 5639: 1 RFC 5652: 1 RFC 5903: 1 RFC 6125: 3 RFC 6455: 1 RFC 6932: 1 RFC 7030: 17 RFC 7427: 1 RFC 768: 1 RFC 792: 1 RFC 793: 1 RFC 8446: 5 RFC 959: 1 X509: X.509: 27	CC: CCMB-2012-04-003: 1 CCMB-2017-04-001: 1 CCMB-2017-04-002: 1 CCMB-2017-04-004: 1 FIPS: FIPS197: 2 ICAO: ICAO: 2 PKCS: PKCS#1: 2 PKCS#3: 3
pdf_data/st_keywords/javacard_version
pdf_data/st_keywords/javacard_api_const	curves: SECP256R1: 1
pdf_data/st_keywords/javacard_packages
pdf_data/st_keywords/certification_process	OutOfScope: out of scope: 1 protocol, the connection is set up by the web browser on the administration workstation which is out of scope. Likewise the TLS protocol itself is outside the scope of this evaluation. Rationale: the trusted: 1	OutOfScope: by authorized users. The functionalities of IAS Classic 5.2.1 other than the ones from SSCD are out of scope of the TOE perimeter. For BioPIN (MOC Server v3.1.1 application) provides biometry recognition with: 1 out of scope: 1
pdf_data/st_metadata	/Author: Stormshield /CreationDate: D:20230808085705+02'00' /Creator: Microsoft® Word 2019 /ModDate: D:20230808085705+02'00' /Producer: Microsoft® Word 2019 /Subject: UTM / NG-Firewall Software Suite /Title: Stormshield Network Security pdf_file_size_bytes: 2008885 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 107	/Author: Emmanuel BACHIMON /CreationDate: D:20230504155302+02'00' /Creator: Microsoft® Word 2016 /ModDate: D:20230504155302+02'00' /Producer: Microsoft® Word 2016 /Title: IAS Classic v5.2 on MultiApp V5.1- Security Target pdf_file_size_bytes: 2282348 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 69
state/cert/convert_garbage	False	False
state/cert/convert_ok	True	True
state/cert/download_ok	True	True
state/cert/extract_ok	True	True
state/cert/pdf_hash	Different	Different
state/cert/txt_hash	Different	Different
state/report/convert_garbage	False	False
state/report/convert_ok	True	True
state/report/download_ok	True	True
state/report/extract_ok	True	True
state/report/pdf_hash	Different	Different
state/report/txt_hash	Different	Different
state/st/convert_garbage	False	False
state/st/convert_ok	True	True
state/st/download_ok	True	True
state/st/extract_ok	True	True
state/st/pdf_hash	Different	Different
state/st/txt_hash	Different	Different