Gigamon GigaVUE, Version 6.12 September 30, 2026 ## National Information Assurance Partnership ## Common Criteria Evaluation and Validation Scheme Validation Report ## Gigamon GigaVUE Visibility Appliance Version 6.12 Report Number: CCEVS-VR-VID11687-2026 Version 1.0 September 30, 2026 National Institute of Standards and Technology Information Technology Laboratory 100 Bureau Drive Gaithersburg, MD 20899 Department of Defense ATTN: NIAP, Suite 6982 9800 Savage Road Fort Meade, MD 20755 6982 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 #### ACKNOWLEDGEMENTS ##### Validation Team Matt Downey, Senior Validator NIAP/CCEVS Farid Ahmed, Lead Validator Russel Fink, Lead Validator (Trainee) Alex Lee, ECR Team Lynne Ambuel Donaldson, ECR Team Robert Wojcik, ECR Team Johns Hopkins University Applied Physics Lab Laurel, Maryland ##### Common Criteria Testing Laboratory Herbert Markle, CCTL Technical Director David Cornwell Kelvert Ballantyne Rachel Kovach Evan Seiz Booz Allen Hamilton (BAH) Laurel, Maryland Gigamon GigaVUE, Version 6.12 September 30, 2026 ii ## Table of Contents | 1 2 | EXECUTIVE SUMMARY ................................................................................................................................ 4 IDENTIFICATION ........................................................................................................................................... 6 | |-------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | | ASSUMPTIONS AND CLARIFICATION OF SCOPE ................................................................................. 7 | | 3 4 5 | ARCHITECTURAL INFORMATION .......................................................................................................... 10 SECURITY POLICY ......................................................................................................................................... 14 5.1.1 Security Audit ....................................................................................................................................... 14 5.1.2 Cryptographic Support ........................................................................................................................ 14 5.1.3 Identification and Authentication ........................................................................................................ 14 | | 9 | | | 11 | SECURITY TARGET ....................................................................................................................................... | | | Security Management .......................................................................................................................... | | | 5.1.4 15 | | | 5.1.5 Protection of the TSF ........................................................................................................................... 15 | | | 5.1.6 TOE Access .......................................................................................................................................... 15 5.1.7 Trusted Path/Channels ........................................................................................................................ 15 | | 6 | DOCUMENTATION ......................................................................................................................................... 16 | | 7 | EVALUATED CONFIGURATION .................................................................................................................. 17 | | 8 | IT PRODUCT TESTING ................................................................................................................................... 18 | | | RESULTS OF THE EVALUATION ................................................................................................................. 23 | | 10 | VALIDATOR COMMENTS ............................................................................................................................. 25 | | | ANNEXES ......................................................................................................................................................... 26 | | 12 | 27 | | 13 | LIST OF ACRONYMS ...................................................................................................................................... 28 | | 14 | TERMINOLOGY .............................................................................................................................................. 29 | | 15 | BIBLIOGRAPHY .............................................................................................................................................. 30 | VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 1 Executive Summary This report documents the assessment of the National Information Assurance Partnership (NIAP) validation team of the evaluation of Gigamon GigaVUE Visibility Appliances, Version 6.12, provided by Gigamon, Inc. It presents the evaluation results, their justifications, and the conformance results. This Validation Report is not an endorsement of the Target of Evaluation by any agency of the U.S. government, and no warranty is either expressed or implied. The evaluation was performed by the Booz Allen Hamilton Inc. Common Criteria Testing Laboratory (CCTL) in Laurel, Maryland, United States of America, and was completed in July 2026. The information in this report is largely derived from the evaluation sensitive Evaluation Technical Report (ETR) and associated test reports, all written by Booz Allen. The evaluation determined that the product is both Common Criteria Part 2 Extended and Part 3 Conformant and meets the assurance requirements set forth in the collaborative Protection Profile for Network Devices Version 3.0e (NDcPP30e). The Gigamon GigaVUE Visibility Appliances (also known as GigaVUE) Version 6.12 are network devices that include hardware and software. The GigaVUE's primary functionality is to use the Gigamon Forwarding Policy to receive out-of-band (data plane) copied network data from external sources (TAP or SPAN port) and forward that copied network data to one or many tool ports for packet capture or analyzing tools based on user selected criteria. GigaVUE is made up of the following three model types: - The GigaVUE HC Series enables greater network traffic visibility into data in motion, minimizes traffic overloads and provides options for deploying both inline and outof-band security and monitoring tools - The GigaVUE® TA Series of edge network packet brokers are designed to aggregate multiple network links and feed the combined traffic either to GigaVUE HC Series products, or directly to security and monitoring tools, or both. - The GigaTAP ™ (GTAP) A Series is a line of network TAPs designed with intelligent management capabilities that monitor link states of connected devices and the power state of all sources of power to minimize link downtime on network. All the GigaVUE models can fulfill the NDcPP30e security requirements individually. Therefore, the evaluated configuration consists of the TOE as a standalone device that is not deployed in a distributed manner. The TOE identified in this Validation Report has been evaluated at a NIAP approved Common Criteria Testing Laboratory using the Common Methodology for IT Security Evaluation (Version 3.1, Rev 5) for conformance to the Common Criteria for IT Security Evaluation (Version 3.1, Rev 5), as interpreted by the Assurance Activities contained in the NDcPP30e. This Validation Report applies only to the specific version of the TOE as evaluated. The evaluation has been conducted in accordance with the provisions of the NIAP Common Criteria Evaluation and Validation Scheme and the conclusions of the testing laboratory in the evaluation technical report is consistent with the evidence provided. The validation team provided guidance on technical issues and evaluation processes and reviewed the individual work units of the ETR for the NDcPP30e Assurance Activities. The validation team found that the evaluation showed that the product satisfies all of the functional requirements and assurance requirements stated in the Security Target (ST). Therefore, the validation team 4 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 concludes that the testing laboratory's findings are accurate, the conclusions justified, and the conformance results are correct. The conclusions of the testing laboratory in the evaluation technical report are consistent with the evidence produced. The technical information included in this report was obtained from the Gigamon GigaVUE Visibility Appliance Version 6.12 Security Target Version 2.1 , dated Sept 03, 2026, and analysis performed by the Validation Team. 5 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 2 Identification The CCEVS is a joint National Security Agency (NSA) and National Institute of Standards effort to establish commercial facilities to perform trusted product evaluations. Under this program, security evaluations are conducted by commercial testing laboratories called Common Criteria Testing Laboratories (CCTLs). CCTLs evaluate products against Protection Profile containing Assurance Activities, which are interpretation of CEM work units specific to the technology described by the PP. The NIAP Validation Body assigns Validators to monitor the CCTLs to ensure quality and consistency across evaluations. Developers of information technology products desiring a security evaluation contract with a CCTL and pay a fee for their product's evaluation. Upon successful completion of the evaluation, the product is added to NIAP's Product Compliant List. Table 1 provides information needed to completely identify the product, including: - The Target of Evaluation (TOE): the fully qualified identifier of the product as evaluated. - The Security Target (ST), describing the security features, claims, and assurances of the product. - The conformance result of the evaluation. - The Protection Profile to which the product is conformant. - The organizations and individuals participating in the evaluation. Table 1 - Evaluation Identifiers | Item | Identifier | |------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Evaluation Scheme | United States NIAP Common Criteria Evaluation and Validation Scheme | | TOE | Gigamon GigaVUE Visibility appliance, running the Gigamon GigaVUE-OS Version 6.12 Refer to Tables 2, 3, and 4 for Model Specifications | | Protection Profile | collaborative Protection Profile for Network Devices, Version 3.0e, 06 December 2023, including all applicable NIAP Technical Decisions and Policy Letters | | Functional Package | Functional Package for Secure Shell (SSH), Version 1.0, 13 May 2021 | | Security Target | Gigamon GigaVUE Visibility Appliance Version 6.12 Security Target v2.1, dated Sept 03, 2026 | | Evaluation Technical Report | Evaluation Technical Report for a Target of Evaluation, ' Gigamon GigaVUE Visibility Appliances Version 6.12, ' Evaluation Technical Report (ETR) Version 1.0, dated September 04, 2026 | | CC Version | Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 5 | | Conformance Result | CC Part 2 extended, CC Part 3 conformant | | Sponsor | Gigamon, Inc. | | Developer | Gigamon, Inc. | | Common Criteria Testing Lab (CCTL) | Booz Allen Hamilton, Laurel, Maryland | | CCEVS Validators | Matt Downey - NIAP/CCEVS Farid Ahmed, Russel Fink, Alex Lee, Lynne Ambuel Donaldson, and Robert Wojcik - JHUAPL | 6 VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 3 Assumptions and Clarification of Scope ## 3.1 Assumptions The following assumptions about the operational environment are made regarding its ability to provide security functionality. - It is assumed that the TOE is deployed in a physically secured operational environment and not subjected to any physical attacks. - It is assumed that there are no general-purpose computing capabilities (e.g., compilers or user applications) available on the TOE, other than those services necessary for the operation, administration and support of the TOE. - The TOE is not responsible for protecting network traffic that is transmitted across its interfaces that is not related to any TOE management functionality or generated data. - TOE Administrators are trusted to follow and apply all administrator guidance in a trusted manner. - It is assumed that regular software and firmware updates will be applied by a TOE Administrator when made available by the product vendor. - Administrator credentials are assumed to be secured from unauthorized disclosure. - TOE Administrators are trusted to ensure that there is no unauthorized access possible for sensitive residual information on the TOE when it is removed from its operational environment. ## 3.2 Threats The following lists the threats addressed by the TOE. - T.UNAUTHORIZED_ADMINISTRATOR_ACCESS - Threat agents may attempt to gain Administrator access to the Network Device by nefarious means such as masquerading as an Administrator to the device, masquerading as the device to an Administrator, replaying an administrative session (in its entirety, or selected portions), or performing man-in-the-middle attacks, which would provide access to the administrative session, or sessions between Network Devices. Successfully gaining Administrator access allows malicious actions that compromise the security functionality of the device and the network on which it resides. - T.WEAK_CRYPTOGRAPHY - Threat agents may exploit weak cryptographic algorithms or perform a cryptographic exhaust against the key space. Poorly chosen encryption algorithms, modes, and key sizes will allow attackers to compromise the algorithms, or brute force exhaust the key space and give them unauthorized access allowing them to read, manipulate and/or control the traffic with minimal effort. - T.UNTRUSTED_COMMUNICATION_CHANNELS - Threat agents may attempt to target Network Devices that do not use standardized secure tunnelling protocols to protect the critical network traffic. Attackers may take advantage of poorly designed protocols or poor key management to successfully perform man-inthe-middle attacks, replay attacks, etc. Successful attacks will result in loss of confidentiality and integrity of the critical network traffic, and potentially could lead to a compromise of the Network Device itself. - T.WEAK_AUTHENTICATION_ENDPOINTS - Threat agents may take advantage of secure protocols that use weak methods to authenticate the endpoints, e.g. a shared password that is guessable or transported as plaintext. The consequences are the same as a poorly designed protocol, the attacker could masquerade as the Administrator or another device, and the attacker could insert themselves into the network stream and perform a man-in-the-middle attack. The result is the critical 7 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 network traffic is exposed and there could be a loss of confidentiality and integrity, and potentially the Network Device itself could be compromised. - T.UPDATE_COMPROMISE - Threat agents may attempt to provide a compromised update of the software or firmware which undermines the security functionality of the device. Non-validated updates or updates validated using nonsecure or weak cryptography leave the update firmware vulnerable to surreptitious alteration. - T.UNDETECTED_ACTIVITY - Threat agents may attempt to access, change, and/or modify the security functionality of the Network Device without Administrator awareness. This could result in the attacker finding an avenue (e.g., misconfiguration, flaw in the product) to compromise the device and the Administrator would have no knowledge that the device has been compromised. - T.SECURITY_FUNCTIONALITY_COMPROMISE - Threat agents may compromise credentials and device data enabling continued access to the Network Device and its critical data. The compromise of credentials includes replacing existing credentials with an attacker's credentials, modifying existing credentials, or obtaining the Administrator or device credentials for use by the attacker. Threat agents may also be able to take advantage of weak administrative passwords to gain privileged access to the device. - T.SECURITY_FUNCTIONALITY_FAILURE - An external, unauthorized entity could make use of failed or compromised security functionality and might therefore subsequently use or abuse security functions without prior authentication to access, change or modify device data, critical network traffic or security functionality of the device. ## 3.3 Clarification of Scope All evaluations (and all products) have limitations, as well as potential misconceptions that might benefit from additional clarification. This text covers some of the more important limitations and clarifications of this evaluation. Note that: - As with any evaluation, this evaluation only shows that the evaluated configuration meets the security claims made, with a certain level of assurance. The level of assurance for this evaluation is defined within the collaborative Protection Profile for Network Devices, Version 3.0e 06 December 2023, including all relevant NIAP Technical Decisions. A subset of the 'optional' and 'selection - based' security requirements defined in the NDcPP30e are claimed by the TOE and documented in the ST. - Consistent with the expectations of the Protection Profile, this evaluation did not specifically search for, nor seriously attempt to counter, vulnerabilities that were not 'obvious' or vulnerabilities to security functionality not claimed in the ST. The CEM defines an 'obvious' vu lnerability as one that is easily exploited with a minimum of understanding of the TOE, technical sophistication and resources. - The functionality evaluated is scoped exclusively to the security functional requirements specified in the Security Target. All other functionality provided by these devices, needs to be assessed separately and no further conclusions can be drawn about their effectiveness. In particular, the GigaVUE's network traffic capture, filter, and forwarding capabilities described in Section 1.3 of the Security Target were not assessed as part of this evaluation. Further information of excluded functionality can be found in Section 2.3 of the Security Target. 8 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 The evaluated configuration of the TOE is the Gigamon GigaVUE Visibility Appliance, shown in Figure 1 and described in Table 1, running the Gigamon GigaVUE-OS Version 6.12. In the evaluated configuration, the TOE uses SSH to secure remote command-line administration and TLS and SSH to secure transmissions of security-relevant data from the TOE to external entities such as an authentication server, syslog, and Gigamon Fabric Manager Server (separate product going through its own NDcPP30e evaluation). The TOE includes administrative guidance in order to instruct Security Administrators in the secure installation and operation of the TOE. Adherence to this guidance is sufficient to ensure that the TOE is operated in accordance with its evaluated configuration. 9 VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 4 Architectural Information Note: The following architectural description is based on the description presented in the Security Target. ## 4.1 TOE Introduction The TOE is a network device as defined in the NDcPP30e which state s: ' This is a Collaborative Protection Profile (cPP) whose Target of Evaluation (TOE) is a Network Device (ND) … A network device in the context of this cPP is a device connected to the network and has an infrastructure within the network '. The TOE consists of the Gigamon GigaVUE Visibility Appliance model, running the Gigamon GigaVUE-OS Version 6.12. Thus, the TOE is a network device composed of hardware and software. Figure 1 - Gigamon GigaVUE TOE Boundary 10 VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 ## 4.2 Physical Boundary The TOE is comprised of both software and hardware. The hardware is comprised of the following: Table 2 - HC Series Properties | Property | HC3 | HC1 | HC1Plus | HCT | |-------------------|-------------------------------------------------|-----------------------------------------------------------------------------------------|-------------------------------------------------|---------------------------------------------------| | Model/Part Number | GVS-HC301-HW (AC power) GVS-HC302-HW (DC power) | GVS-HC101-HW (AC power) GVS-HC102-HW (DC power) | GVS-HC1P1-HW (AC power) GVS-HC1P2-HW (DC power) | GVS-HCT01-HW (AC power) | | Size | 3RU | 1RU | 1RU | 1RU | | Processor | Intel Atom C2758 (Rangeley) | Intel Atom C2538 (Rangeley) | Intel Atom C3538 (Denverton) | Intel Atom C3538 (Denverton) | | Fixed Ports | 10/100/1000M RJ45 Mgmt. port Serial Console | 10/100/1000M RJ45 Mgmt. port Serial Console 12 1G/10G Ports (QSFP) 4 10/100/1000M Ports | 10/100/1000M RJ45 Mgmt. port Serial Console | 3 40/100G QSFP28 ports. Mgmt. port Serial Console | Table 3 - TA Series Properties | Property | TA25 | TA25E | TA200 | TA200E | TA400 | TA400E | |-------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------|----------------------------------------------------|-----------------------------------------------------|-------------------------------------------------|-----------------------------------------------------| | Model/Part Number | GVS-TAX21-HW (AC power) • all ports enabled GVS-TAX22-HW (DC power) • all ports enabled GVS-TAX21A-HW (AC power) • 24 10G/25G ports enabled GVS-TAX22A-HW (DC power) 24 10G/25G ports enabled | GVS-TAX21E- HW (AC power) GVS-TAX22E- HW (DC power) | GVS-TAC21- HW (AC power) GVS-TAC22- HW (DC power) | GVS-TAC21E- HW (AC power) GVS-TAC22E- HW (DC power) | GVS-TAC41-HW (AC power) GVS-TAC42-HW (DC power) | GVS-TAC41E- HW (AC power) GVS-TAC42E- HW (DC power) | | Size | 1RU | 1RU | 2RU | 2RU | 1RU | 1RU | | Processor | Intel Atom C3538 (Denverton) | Intel Xeon D1518 (Broadwell) | Intel Xeon D1527 (Broadwell) | Intel Xeon D1518 (Broadwell) | Intel Atom C3538 (Denverton) | Intel Pentium D1519 (Broadwell) | | Fixed Ports | 10/100/1000M Mgmt. port Serial Console 8 40G/100G QSFP28 | 10/100/1000M Mgmt. port Serial Console 48 | 10/100/1000M Mgmt. port Serial Console 64 100G/40G | 10/100/1000M Mgmt. port Serial Console 64 40G/100G | 10/100/1000M Mgmt. port Serial Console 32 400Gb | 10/100/1000M Mgmt. port Serial Console 32 400Gb | 11 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 | Property | TA25 | TA25E | TA200 | TA200E | TA400 | TA400E | |------------|-----------------------------------|----------------------------|---------|--------------|------------------------------------------|--------------------------------------------------------------| | | cages + 48 1G/10G/25G SFP28 cages | 25Gb/10Gb/1Gb 8 100Gb/40Gb | ports | QSFP28 cages | /100Gb/ 40Gb QSFP-DD/ QSFP28/QSFP+ ports | /100Gb/ 40Gb QSFP-DD/ QSFP28/QSFP+ ports 2 x 10Gb SFP+ ports | Table 4 - GTAP Series Properties | Property | GTAP | GTAP | |-------------------|----------------------------------------------------|----------------------------------------------------------------------------------------------| | Model/Part Number | GTP-ATX21 (AC power) | GTP-ASF21 (AC power) | | Size | 1RU | 1RU | | Processor | Intel Atom C3338 (Denverton) | Intel Atom C3338 (Denverton) | | Fixed Ports | 10/100/1000M Mgmt. port 4x 10/100/1000BASE-T links | 10/100/1000M Mgmt. port 4x 1Gb/10Gb Copper or Fiber links 4x SFP /SFP+ (1Gb/10Gb) TAP ports. | The TOE resides on a network and supports (in some cases optionally) the following hardware, software, and firmware in its environment: Table 5 - IT Environment Components | Component | Definition | | |------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------| | Audit Server | The TOE connects to the audit server to send syslog messages to it for remote storage. This is used to send copies of TOE audit data to be stored in a remote location for data redundancy purposes. | Mandatory | | Certification Authority (CA) | A server that acts as a trusted issuer of digital certificates and distributes a CRL that identifies revoked certificates. | Mandatory | | Gigamon Fabric Manager | The Gigamon Fabric Manager provides a central location for the configuration, management, and operation of one or more Gigamon GigaVUE Visibility Appliances. The purpose and value of a Gigamon Fabric Manager is to manage multiple Gigamon GigaVUE Visibility Appliances (TA and HC models) within a network deployment which allows greater network visibility for the primary functionality of the Gigamon GigaVUE Visibility Appliances. All of the GigaVUE Visibility Appliance (i.e., TOE) models can fulfill the NDcPP30e security requirements individually. Therefore, the evaluated configuration consists of the TOE as a standalone device and is not deployed in a distributed manner. The Gigamon Fabric Manager can only be used with HC Series and TA Series models of the GigaVUE Visibility Appliance. Additionally, the use of a Gigamon Fabric Manager in the evaluated configuration is as an optional, operational environment component. | Optional | | LDAP Server | A system that is capable of receiving authentication requests using | Mandatory | 12 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 | Component | Definition | | |------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------| | | LDAP over TLS and validating these requests against identity and credential data that is defined in an LDAP directory. | | | Management Workstation | Any general-purpose computer that is used by an administrator to manage the TOE. The TOE can be managed remotely, in which case the management workstation requires an SSH client to access the CLI, or locally, in which case the management workstation must be physically connected to the TOE using the serial port and must use a terminal emulator that is compatible with serial communications. | Mandatory | 13 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 5 Security Policy ### 5.1.1 Security Audit Audit records are generated for various types of management activities and events. The audit records include the date and time stamp of the event, the event type and subject identity. In the evaluated configuration, the TSF is configured to transmit audit data to a remote audit server using SSHv2, but audit data is also stored locally to ensure availability of the data if communications with the audit server are unavailable. Local audit records are stored in 'message' files which are rotated to ensure a maximum limit of disk usage is enforced. Only users with the Admin privilege can access or delete the log files. Users with the Admin privilege are considered trusted users and are therefore not expected to delete or modify the audit records. ### 5.1.2 Cryptographic Support The TOE uses sufficient security measures to protect its data in transmission by implementing cryptographic methods and trusted channels. The TOE uses SSH to secure the remote CLI and audit server trusted channels. The TOE uses TLS to secure the trusted channel for the LDAP server. The TOE uses HTTPS to secure the trusted channel from the Gigamon Fabric Manager. Cryptographic keys are generated using the CTR_DRBG. The TOE erases all plaintext secret and private keys that reside in both RAM and non-volatile storage with zeroes. In the evaluated configuration, the TOE operates in 'Secure Cryptography Mode' which is used to restrict algorithms to meet the claimed functionality. ### 5.1.3 Identification and Authentication All users must be identified and authenticated to the TOE before being allowed to perform any actions on the TOE. This is true of users accessing the TOE via the local console or the protected path using the remote CLI via SSH. Users authenticate to the TOE using one of the following methods: - Username/password (defined on the TOE) - LDAP authentication - Username/public key (SSH only) The TSF provides a configurable number of maximum consecutive authentication failures that are permitted by a user. Once this number has been met, the account is locked for a configurable time interval. Passwords that are maintained by the TSF can be composed of upper case, lower case, numbers and special characters. The Security Administrator can define the minimum password length between 8 and 30 characters. Password information is never revealed during the authentication process including during login failures. Before a user authenticates to the device, a configurable warning banner is displayed. As part of establishing trusted remote communications, the TOE provides X.509 certificate functionality. In addition to verifying the validity of certificates, the TSF can check their revocation status using a certificate revocation list (CRL). The TSF can also generate a Certificate Signing Request in order to obtain a signed certificate to install for its own use as a TLS server. 14 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 5.1.4 Security Management The TOE defines two roles: 'Admin' and 'Monitor'. Each of these roles has varying levels of fixed privilege to interact with the TS F. The 'Admin' role is able to perform all security -relevant management functionality (such as user management, password policy configuration, application of software updates, and configuration of cryptographic settings) and corresponds to the NDcPP30e 's definition of Security Administrator. The Monitor role provides view -only access to ports and configurations and is not considered a Security Administrator of the TOE. Management functions can be performed using the local console or remote CLI. All software updates to the TOE are performed manually. . ### 5.1.5 Protection of the TSF The TOE stores usernames and passwords in a password file that cannot be viewed by any user on the TOE regardless of the user's role. The passwords are hashed using SHA-512. Public keys are stored in the configuration database which is integrity checked at boot time. Key data is stored in plaintext on the hard drive but cannot be accessed by any user. The TOE has an underlying hardware clock that is used for keeping time. The time can be manually set by the administrator. Power-on self-tests are executed automatically when the cryptographic module is loaded into memory. All binaries (e.g., executables, libraries), are located on a read-only partition and cannot be modified. In addition, the TOE has a configuration database that is integrity checked at boot time. The version of the TOE (both the currently executing version and the installed/updated version, if different) can be verified from any of the administrative interfaces provided by the TSF. The updated image is verified via a digital signature. ### 5.1.6 TOE Access The TOE can terminate inactive local console or remote CLI sessions after a specified time period. The default setting is 15 minutes. Users can also terminate their own interactive sessions. Once a session has been terminated, the TOE requires the user to re-authenticate to establish a new session. The TOE displays an administratively configured banner on the local console and remote CLI prior to allowing any administrative access to the TOE. ### 5.1.7 Trusted Path/Channels The TOE connects and sends data to IT entities that reside in the Operational Environment via trusted channels. In the evaluated configuration, the TOE connects with an audit server using SSH to encrypt the audit data that traverses the channel. The TOE also connects with an LDAP server using TLS and a Gigamon Fabric Manager (HC and TA Series only) using HTTPS. When accessing the TOE remotely, administrators interface with the TSF using a trusted path. The remote CLI is protected via SSH. 15 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 6 Documentation The vendor provided the following guidance documentation in support of the evaluation: - Gigamon GigaVUE Visibility Appliance Version 6.12 Supplemental Administrative Guidance for Common Criteria Version 1.0, January 28, 2026 [AGD] - GigaVUE-OS CLI Reference Guide, GigaVUE-OS, Product Version 6.12, Document Version 1.0 - GigaVUE-HC1 Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 - GigaVUE-HC1-Plus Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 - GigaVUE-HC3 Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 - GigaVUE-HCT Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 - GigaVUE TA25 Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 - GigaVUE TA25E Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 - GigaVUE TA200 Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 - GigaVUE TA200E Hardware Installation Guide, GigaVUE TA Series, Product Version 6.9, Document Version 1.0 - GigaVUE TA400 Hardware Installation Guide, GigaVUE TA Series, v1.0 Product Version 6.9, Document Version 1.0 - GigaVUE TA400E Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 - GigaVUE G-TAP A Series 2 Hardware Installation Guide, G-TAP A-TX21, G-TAP ATX21-C, G-TAP A-SF21, Product Version 6.9, Document Version 1.0 Note: the TA200E, TA400, and G-TAP A Series 2 had no changes as a result of the 6.12 upgrade but are considered part of the baseline documentation for version 6.12. Any additional customer documentation provided with the product, or that which may be available online was not included in the scope of the evaluation and therefore should not be relied upon to configure or operate the device as evaluated. 16 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 7 Evaluated Configuration The evaluated configuration, as defined in the Security Target, is Gigamon GigaVUE Visibility Appliance, running the software: GigaVUE-OS version 6.12. Section 4.2 describes the TOE's physical configuration as well as the operational environment components to which it communicates. In its evaluated configuration, the TOE is configured to communicate with the following environment components: - Certificate Authority (CA) for distribution of certificates and CRLs - LDAP Server for remote authentication - Management Workstation for local and remote administration - Audit Server for remote storage of audit records - Gigamon Fabric Manager (separate product). To use the product in the evaluated configuration, the product must be configured as specified in the Gigamon GigaVUE Visibility Appliance Version 6.12 Supplemental Administrative Guidance for Common Criteria Version 1.0 document. 17 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 8 IT Product Testing This section describes the testing efforts of the developer and the evaluation team. It is derived from information contained in the Assurance Activity Report for a Target of Evaluation ' Gigamon GigaVUE Visibility Appliance Version 6.12 ' Assurance Activities Report v1.0 , dated September 04, 2026. ## 8.1 Test Configuration The evaluation team configured the TOE for testing according to the Gigamon GigaVUE Visibility Appliance Version 6.12 Supplemental Administrative Guidance for Common Criteria Version 1.0 (AGD) document. The evaluation team set up a test environment for the independent functional testing that allowed them to perform the assurance activities against the TOE over the SFR relevant interfaces. The evaluation team conducted testing in the Booz Allen CCTL facility on an isolated network. Testing was performed against all two management interfaces defined in the ST (local CLI, remote CLI). The TOE was configured to communicate with the environment components shown in Table 5 and Figure 2. Figure 21 - Test Configuration 18 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 E1: This is the local administrator access to the CLI via a direct connection. E2: The TOE acts as a SSH server for remote administrator access to the CLI. - E3: The TOE acts as a TLSv1.2 client for accessing an LDAP server interface for authentication services. E4: The TOE acts as an SSH client for sending audit records to a remote audit server for external audit log storage. E5: (HC Series and TA Series models only) The TOE acts as a HTTPS (i.e., TLSv1.2) server for connections received from a Gigamon Fabric Manager (separate product) which can be used to provide a central location for the configuration, management, and operation of primary functionality of one or more Gigamon GigaVUE HC and TA Visibility Appliances. The trusted channel interface is considered part of the TOE. The operational functionality provided by the Gigamon Fabric Manager is not considered part of the TOE. E6: The TOE interfaces with a Certification Authority (CA) for issuance of server certificates and publication of a Certificate Revocation List (CRL) to determine the validity of certificates presented to the TOE. ## 8.2 Developer Testing No evidence of developer testing is required in the Evaluation Activities for this product. ## 8.3 Evaluation Team Independent Testing The test team's test approach was to test the security mechanisms of the TOE by exercising the external interfaces to the TOE and viewing the TOE behavior on the platform. The ST and the independent test plan were used to demonstrate test coverage of all SFR testing assurance activities as defined by the NDcPP30e for all security relevant TOE external interfaces. TOE external interfaces that will be determined to be security relevant are interfaces that - change the security state of the product, - permit an object access or information flow that is regulated by the security policy, - are restricted to subjects with privilege or behave differently when executed by subjects with privilege, or - invoke or configure a security mechanism. Security functional requirements were determined to be appropriate to a particular interface if the behavior of the TOE that supported the requirement could be invoked or observed through that interface. The evaluation team tested each interface for all relevant behavior of the TOE that applied to that interface. ## 8.4 Evaluation Team Vulnerability Testing The evaluation team reviewed vendor documentation, formulated hypotheses, performed vulnerability analysis, and documented the hypotheses and analysis in accordance with NDcPP30e requirements. Keywords were identified based upon review of the Security Target and AGD. Table 6 identifies the keywords (version information used for refining results). Table 6 - Public Vulnerability Search Keywords | Keyword | Description | |--------------|----------------------------------------------------------------------------------------------------| | Gigamon | This is a generic term for searching for known vulnerabilities produced by the company as a whole. | | GigaVUE 6.12 | This is a generic term for searching for known vulnerabilities for | 19 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 | Keyword | Description | |------------------------------------------|-----------------------------------------------------------------------------------------------------| | | the specific product. | | GigaVUE-OS | This is a generic term for searching for known vulnerabilities for the specific product. | | Rocky Linux 8.10 | This is a generic term searching for known vulnerabilities for the underlying operating system. | | Libraries | | | Apache 2.4.68 | This is a generic term searching for known vulnerabilities for the TOE's cryptographic TLS module. | | OpenSSL (3.5.7) | This is a generic term searching for known vulnerabilities for the TOE's cryptographic SSH module. | | OpenSSH (10_4P1) | This is a generic term searching for known vulnerabilities for the third-party library. | | Curl (8.20.0) | This is a generic term searching for known vulnerabilities for the third-party library. | | bind-export-libs (9.11.36-16) | This is a generic term searching for known vulnerabilities for the third-party library. | | bind-libs-lite (9.11.36-16) | This is a generic term searching for known vulnerabilities for the third-party library. | | bzip2 (1.0.6-28) | This is a generic term searching for known vulnerabilities for the third-party library. | | gzip (1.9-13) | This is a generic term searching for known vulnerabilities for the third-party library. | | log4cxx (1.7.0) | This is a generic term searching for known vulnerabilities for the third-party library. | | Net-SNMP (5.9.5.2) | This is a generic term searching for known vulnerabilities for the third-party library. | | OpenLdap (2.6.10) | This is a generic term searching for known vulnerabilities for the third-party library. | | Perl (5.32.1-474) | This is a generic term searching for known vulnerabilities for the third-party library. | | rsyslog (8.2102.0-15) | This is a generic term searching for known vulnerabilities for the third-party library. | | SQLite (3.26.0-20) | This is a generic term searching for known vulnerabilities for the third-party library. | | Unzip (6.0-48) | | | Zlib (1.2.11-26) | This is a generic term searching for known vulnerabilities for the third-party library. | | Hardware | | | Intel Atom (C2758 and C2538) (Rangely) | This is a generic term searching for known vulnerabilities for the TOE's underlying host processor. | | Intel Xeon (D1527 and D1518) (Broadwell) | This is a generic term searching for known vulnerabilities for the TOE's underlying host processor. | | Intel Atom (C3338 and 3538) (Denverton) | This is a generic term searching for known vulnerabilities for the TOE's underlying host processor. | 20 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 | Keyword | Description | |---------------------------------|-----------------------------------------------------------------------------------------------------| | Intel Pentium D1519 (Broadwell) | This is a generic term searching for known vulnerabilities for the TOE's underlying host processor. | These keywords were used individually and as part of various permutations and combinations to search for vulnerabilities on public vulnerability sources on Sept 04, 2026. The following public vulnerability sources were searched: - [NIST National Vulnerabilities: https://web.nvd.nist.gov/view/vuln/search](https://web.nvd.nist.gov/view/vuln/search) - Common Vulnerabilities and Exposures: http://cve.mitre.org/cve/ https://www.cvedetails.com/vulnerability-search.php - [US-CERT: http://www.kb.cert.org/vuls/html/search](http://www.kb.cert.org/vuls/html/search) - [Tenable Network Security http://nessus.org/plugins/index.php?view=search](http://nessus.org/plugins/index.php?view=search) - [Tipping Point Zero Day Initiative http://www.zerodayinitiative.com/advisories](http://www.zerodayinitiative.com/advisories) - Offensive Security Exploit Database: https://www.exploit-db.com/ - [Rapid7 Vulnerability Database: https://www.rapid7.com/db/vulnerabilities](https://www.rapid7.com/db/vulnerabilities) - Known Exploit Database: https://www.cisa.gov/known-exploited-vulnerabilitiescatalog Upon the completion of the vulnerability analysis research, the team had identified several generic vulnerabilities upon which to build a test suite. These tests were created specifically with the intent of exploiting these vulnerabilities within the TOE or its configuration. 21 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 The team tested the following areas: - Port Scanning Remote access to the TOE should be limited to the standard TOE interfaces and procedures. This test enumerates network port and service information to determine if any ports were open and running services outside of the TOE standard configuration. - Fuzzing - - Mutated TYPE and CODE This test determines if the TOE is adversely affected by the handling of large number of mutated IPv4 and ICMPv4. IPv6 was not supported in the evaluated configuration. - Fuzzing - - Mutated remaining field This test determines if the TOE is adversely affected by the handling of large number of mutated IPv4 packets where the header fields are carefully mutated to represent boundary cases, significant values, and randomly chosen values. IPv6 was not supported in the evaluated configuration. - · - SSH Timing Attack (User Enumeration) This attack attempts to enumerate validate usernames for the SSH interface, by observing the difference in server response times to valid username login attempts. - Force SSHv1 This attack determines if the client will accept both SSHv1 and SSHv2 connections when the TOE claims to only support SSHv2 - · - CLI Privilege Escalation This attack involves enumerating a valid username with an attempt to access the underlying OS CLI shell, then cracking the user's password and logging in. The evaluation team determined that no residual vulnerabilities exist that are exploitable by attackers with Basic Attack Potential. 22 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 9 Results of the Evaluation The results of the assurance requirements are generally described in this section and are presented in detail in the proprietary ETR. The reader of this document can assume that all Evaluation Activities and work units received a passing verdict. A verdict for an assurance component is determined by the resulting verdicts assigned to the corresponding evaluator action elements. The evaluation was conducted based upon CC version 3.1 rev 5 and CEM version 3.1 rev 5. The evaluation determined the TOE to be Part 2 extended, and meets the SARs contained the PP. Additionally, the evaluator performed the Evaluation Activities specified in the NDcPP30e. The following evaluation results are extracted from the non-proprietary Evaluation Technical Report provided by the CCTL and are augmented with the validator's observations thereof. ## 9.1 Evaluation of the Security Target (ASE) The evaluation team applied each ASE CEM work unit. The ST evaluation ensured the ST contains a description of the environment in terms of policies and assumptions, a statement of security requirements claimed to be met by the Gigamon GigaVUE Visibility Appliance product that is consistent with the Common Criteria, and product security function descriptions that support the requirements. Additionally, the evaluator performed an assessment of the Evaluation Activities specified in the NDcPP30e Supporting Documents in order to verify that the specific required content of the TOE Summary Specification is present, consistent, and accurate. The validators reviewed the work of the evaluation team, and found that sufficient evidence and justification was provided by the evaluation team to confirm that the evaluation was conducted in accordance with the requirements of the CEM, and that the conclusion reached by the evaluation team was justified. ## 9.2 Evaluation of the Development (ADV) The evaluation team applied each ADV CEM work unit. The evaluation team assessed the design documentation and found it adequate to aid in understanding how the TSF provides the security functions. The design documentation consists of a functional specification contained in the Security Target's TOE Summary Specification. Additionally , the evaluator performed the Evaluation Activities specified in the NDcPP30e Supporting Documents related to the examination of the information contained in the TOE Summary Specification. The validators reviewed the work of the evaluation team and found that sufficient evidence and justification was provided by the evaluation team to confirm that the evaluation was conducted in accordance with the Assurance Activities, and that the conclusion reached by the evaluation team was justified. ## 9.3 Evaluation of the Guidance Documents (AGD) The evaluation team applied each AGD CEM work unit. The evaluation team ensured the adequacy of the user guidance in describing how to use the operational TOE. Additionally, the evaluation team ensured the adequacy of the administrator guidance in describing how to securely administer the TOE. The guides were assessed during the design and testing phases of the evaluation to ensure they were complete. Additionally, the evaluator performed the Evaluation Activities specified in the NDcPP30e Supporting Document related to the examination of the information contained in the operational guidance documents. 23 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 The validators reviewed the work of the evaluation team and found that sufficient evidence and justification was provided by the evaluation team to confirm that the evaluation was conducted in accordance with the Assurance Activities, and that the conclusion reached by the evaluation team was justified. ## 9.4 Evaluation of the Life Cycle Support Activities (ALC) The evaluation team applied each ALC CEM work units. The evaluation team found that the TOE was identified. The validators reviewed the work of the evaluation team and found that sufficient evidence and justification was provided by the evaluation team to confirm that the evaluation was conducted in accordance with the requirements of the CEM, and that the conclusion reached by the evaluation team was justified. ## 9.5 Evaluation of the Test Documentation and the Test Activity (ATE) The evaluation team applied each ATE CEM work unit. The evaluation team ran the set of tests specified by the Assurance Activities in the NDcPP30e Supporting Documents and recorded the results in a Test Report, summarized in the Evaluation Technical Report and sanitized for nonproprietary consumption in the Assurance Activity Report. The validators reviewed the work of the evaluation team and found that sufficient evidence was provided by the evaluation team to show that the evaluation activities addressed the test activities in the NDcPP30e Supporting Documents, and that the conclusion reached by the evaluation team was justified. ## 9.6 Vulnerability Assessment Activity (VAN) The evaluation team applied each AVA CEM work unit. The evaluation team performed a public search for vulnerabilities, performed vulnerability testing and did not discover any issues with the TOE. The evaluation team also ensured that the specific vulnerabilities defined in the NDcPP30e Supporting Documents were assessed and that the TOE was resistant to exploit attempts that utilize these vulnerabilities. The validators reviewed the work of the evaluation team and found that sufficient evidence and justification was provided by the evaluation team to confirm that the evaluation addressed the vulnerability analysis requirements in the NDcPP30e Supporting Documents, and that the conclusion reached by the evaluation team was justified. ## 9.7 Summary of Evaluation Results The evaluation team's assessment of the evaluation evidence demonstrates that the claims in the ST are met. Additionally, the evaluation team's test activities also demonstrated the accuracy of the claims in the ST. The validation team's assessment of the evidence provided by the evaluation team is that it demonstrates that the evaluation team performed the Evaluation Activities in the NDcPP30e Supporting Document, and correctly verified that the product meets the claims in the ST. 24 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 10 Validator Comments The validation team notes that the evaluated configuration is dependent upon the TOE being configured per the evaluated configuration instructions in the Gigamon GigaVUE Visibility Appliance Version 6.12 Supplemental Administrative Guidance for Common Criteria Version 1.0 document. No versions of the TOE and software, either earlier or later were evaluated. Administrators should take note of the fact that when the product is configured to offload audit files to an audit logging server, if that communications link is interrupted, the audit files generated during the time of the interruption will be captured locally. However, upon resumption of the connectivity, the offload begins with the reconnection and will NOT send those audit files generated during the outage. It will be necessary for the administrator to take steps to offload those files or they will be overwritten when the audit log is full. Please note that the functionality evaluated is scoped exclusively to the security functional requirements specified in the Security Target. Other functionality included in the product was not assessed as part of this evaluation. Other functionality provided by devices in the operational environment, such as the syslog server, need to be assessed separately and no further conclusions can be drawn about their effectiveness. All other concerns and issues are adequately addressed in other parts of this document 25 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 11 Annexes Not applicable 26 VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 12 Security Target The security target for this product's evaluation is Gigamon GigaVUE Visibility Appliance Version 6.12 Security Target v2.1, dated Sept 03, 2026. 27 VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 13 List of Acronyms | Acronym | Definition | |-----------|----------------------------------------------| | AES | Advanced Encryption Standard | | API | Application Programming Interface | | CA | Certificate Authority | | CAVP | Cryptographic Algorithm Verification Program | | CC | Common Criteria | | CLI | Command-Line Interface | | cPP | collaborative Protection Profile | | CPU | Central Processing Unit | | CRL | Certificate Revocation List | | CSP | Content Security Policy | | DRBG | Deterministic Random Bit Generator | | FTP | File Transfer Protocol | | HMAC | Hash-based Message Authentication Code | | HTTPS | Hypertext Transfer Protocol Secure | | I&A | Identity and Access | | IDS | Intrusion Detection System | | LDAP | Lightweight Directory Access Protocol | | MAC | Message Authentication Code | | NIAP | National Information Assurance Partnership | | NTP | Network Time Protocol | | OCSP | Online Certificate Status Protocol | | OS | Operating System | | PP | Protection Profile | | RAM | Random Access Memory | | RBG | Random Bit Generator | | RNG | Random Number Generator | | RU | Rack Unit | | SCP | Secure Copy Protocol | | SFR | Security Functional Requirement | | SFTP | SSH File Transfer Protocol | | SHA | Secure Hash Algorithm | | SHS | Secure Hash Standard | | SPAN | Switched Port Analyzer | | SSH | Secure Shell | | ST | Security Target | | SVR | Server | | TAP | Test Access Port | | TFTP | Trivial File Transfer Protocol | | TLS | Transport Layer Security | | TOE | Target of Evaluation | | TSF | TOE Security Function | | UART | Universal Asynchronous Receiver/Transmitter | | UI | User Interface | 28 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 14 Terminology | Term | Definition | |--------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Administrator or 'Admin' | A user who is assigned the 'Admin' role on the TOE and has the ability to manage the TSF. Synonymous with Security Administrator. | | Credential | Data that establishes the identity of a user (e.g., a cryptographic key or password). | | Operating System (OS) | Software that manages hardware resources and provides services for applications. | | Platform | A platform can be an operating system, hardware environment, a software-based execution environment, or some combination of these. These types platforms may also run atop other platforms. | | Security Administrator | An authorized administrator role that is authorized to manage the TOE and its data. This TOE defines three separate user roles, but only the most privileged role (Admin) is authorized to manage the TOE's security functio nality and is therefore considered to be the Security Administrator for the TOE. | | Trusted Channel | An encrypted connection between the TOE and a system in the Operational Environment. | | Trusted Path | An encrypted connection between the TOE and the application a Security Administrator uses to manage it (SSH client, terminal client, etc.). | | User | In a CC context, any individual who has the ability to access the TOE functions or data. | 29 ###### VALIDATION REPORT ####### Gigamon GigaVUE Visibility Appliance, Version 6.12 ### 15 Bibliography 1. Common Criteria for Information Technology Security Evaluation - Part 1: Introduction and general model, dated April 2017, version 3.1, Revision 5, CCMB-2017-004-001 2. Common Criteria for Information Technology Security Evaluation - Part 2: Security functional components, dated April 2017, version 3.1, Revision 5, CCMB-2017-004-002 3. Common Criteria for Information Technology Security Evaluation - Part 3: Security assurance components, dated April 2017, version 3.1, Revision 5, CCMB-2017-004-003 4. Common Methodology for Information Technology Security Evaluation - Evaluation Methodology, dated April 2017, version 3.1, Revision 5, CCMB-2017-004-004 5. collaborative Protection Profile for Network Devices, Version 3.0e, 06 December 2023 6. Functional Package for Secure Shell (SSH) Version 1.0, 13 May 2021 7. Gigamon GigaVUE Visibility Appliances Version 6.12 Security Target, Version 2.1, dated Sept 03, 2026 8. Assurance Activity Report for a Target of Evaluation 'Gigamon GigaVUE Visibility Appliances Version 6.12' Assurance Activities Report Version 1.0, dated September 04, 2026 9. Evaluation T echnical Report for a Target of Evaluation, 'Gigamon GigaVUE Visibility Appliances Version 6.12,' Evaluation Technical Report (ETR) Version 1.0, dated September 04, 2026 10. Gigamon GigaVUE Version 6.12 Vulnerability Analysis, Version 1.3, dated September 04, 2026 11. Gigamon GigaVUE Visibility Appliances Version 6.12 Supplemental Administrative Guidance for Common Criteria Version 1.0, January 28, 2026 12. GigaVUE-OS CLI Reference Guide, GigaVUE-OS, Product Version 6.12, Document Version 1.0 13. GigaVUE-HC1 Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 14. GigaVUE-HC1-Plus Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 15. GigaVUE-HC3 Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 16. GigaVUE-HCT Hardware Installation Guide, GigaVUE HC Series, Product Version 6.12, Document Version 1.0 17. GigaVUE TA25 Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 18. GigaVUE TA25E Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 19. GigaVUE TA200 Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 20. GigaVUE TA200E Hardware Installation Guide, GigaVUE TA Series, Product Version 6.9, Document Version 1.0 21. GigaVUE TA400 Hardware Installation Guide, GigaVUE TA Series, v1.0 Product Version 6.9, Document Version 1.0 22. GigaVUE TA400E Hardware Installation Guide, GigaVUE TA Series, Product Version 6.12, Document Version 1.0 30 ####### VALIDATION REPORT Gigamon GigaVUE Visibility Appliance, Version 6.12 23. GigaVUE G-TAP A Series 2 Hardware Installation Guide, G-TAP A-TX21, G-TAP ATX21-C, G-TAP A-SF21, Product Version 6.9, Document Version 1.0 31