This page was not yet optimized for use on mobile
devices.
collaborative Protection Profile for Network Devices v2.1
Web information
| Status | archived |
|---|---|
| Valid from | 24.09.2018 |
| Valid until | 11.01.2022 |
| Scheme | ❌ None |
| Category | Network and Network-Related Devices and Systems |
| Security level | None |
Certification report
Extracted keywords
Symmetric Algorithms
AESProtocols
SSH, TLS1.1, TLS1.2, TLS, DTLS, IPsecTrusted Execution Environments
TEEClaims
T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.WEAK_CRYPTOGRAPHY, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.WEAK_AUTHENTICATION_ENDPOINTS, T.UPDATE_COMPROMISE, T.UNDETECTED_ACTIVITY, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.PASSWORD_CRACKING, A.PHYSICAL_PROTECTION, A.LIMITED_FUNCTIONALITY, A.NO_THRU_TRAFFIC_PROTECTION, A.TRUSTED_ADMINISTRATOR, A.ADMIN_CREDENTIALS_SECURE, A.COMPONENTS_RUNNING, A.RESIDUAL_INFORMATION, OE.PHYSICAL, OE.NO_GENERAL_PURPOSE, OE.TRUSTED_ADMIN, OE.UPDATES, OE.ADMIN_CREDENTIALS_SECURE, OE.COMPONENTS_RUNNING, OE.RESIDUAL_INFORMATIONSecurity Assurance Requirements (SAR)
ADV_FSP.1, AGD_OPE, AGD_PRE, ALC_CMS, ALC_CMC, ATE_IND, AVA_VAN, APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1, APE_SPD.1, ASE_CCL, ASE_ECD, ASE_INT, ASE_OBJ, ASE_REQ, ASE_SPD, ASE_TSSSecurity Functional Requirements (SFR)
FAU_GEN_EXT.1, FAU_STG_EXT.2, FAU_STG_EXT.4, FAU_GEN.1, FAU_GEN, FAU_STG_EXT, FAU_STG, FAU_GEN_EXT, FCO_CPC_EXT.1, FCO_CPC_EXT, FCS_NTP_EXT.1, FCS_RBG_EXT.1, FCS_SSHS_EXT.1, FCS_TLSC_EXT.2, FCS_TLSS_EXT.2, FCS_TLSC_EXT.1.1, FCS_CKM.2, FCS_SSHC_EXT.1.5, FCS_SSHS_EXT.1.5, FCS_CKM, FCS_COP, FCS_RBG_EXT, FCS_NTP_EXT, FCS_SSHC_EXT, FCS_SSHS_EXT, FCS_TLSC_EXT, FCS_TLSS_EXT, FIA_PMG_EXT.1, FIA_UAU_EXT.2, FIA_AFL.1, FIA_AFL, FIA_PMG_EXT, FIA_UIA_EXT, FIA_UAU_EXT, FIA_UAU, FMT_MOF, FMT_MTD, FMT_SMF, FMT_SMR, FPT_APW_EXT.1, FPT_STM_EXT.1, FPT_TUD_EXT.1, FPT_SKP_EXT, FPT_APW_EXT, FPT_TST_EXT, FPT_TUD_EXT, FPT_STM_EXT, FPT_ITT, FTA_SSL_EXT.1, FTA_SSL_EXT, FTA_SSL, FTA_TAB, FTP_ITC, FTP_TRPEvaluation facilities
Teron LabsStandards
X.509File metadata
| Title | Microsoft Word - ACSC Certifcation Report EFT-T006_NDcPPv2.1_v0.1.docx |
|---|---|
| Creation date | D:20190930163017Z |
| Modification date | D:20191008143714+11'00' |
| Pages | 23 |
| Creator | Word |
| Producer | Mac OS X 10.10.5 Quartz PDFContext |
Protection Profile
Extracted keywords
Symmetric Algorithms
AES, HMAC, HMAC-SHA-384, HMAC-SHA-512, HMAC-SHA-256Asymmetric Algorithms
ECDHE, ECDH, ECDSA, ECC, Diffie-Hellman, DHE, DH, DSAHash functions
SHA-1, SHA1, SHA-256, SHA-384, SHA-512, SHA256, SHA384, SHA512, SHA-2Schemes
MAC, AEADProtocols
SSH, SSL, SSL 2.0, SSL 3.0, TLS, TLS 1.2, TLS 1.1, TLS v1.2, TLS 1.0, TLS v1.0, DTLS, DTLS 1.2, DTLS 1.0, DTLS v1.2, DTLS v1.0, IKEv1, IKEv2, IKE, IPsec, VPNRandomness
DRBG, RBGBlock cipher modes
CBC, CTR, GCMTLS cipher suites
TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384Claims
T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.WEAK_CRYPTOGRAPHY, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.WEAK_AUTHENTICATION_ENDPOINTS, T.UPDATE_COMPROMISE, T.UNDETECTED_ACTIVITY, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.PASSWORD_CRACKING, T.SECURITY_FUNCTIONALITY_FAILURE, A.PHYSICAL_PROTECTION, A.LIMITED_FUNCTIONALITY, A.NO_THRU_TRAFFIC_PROTECTION, A.TRUSTED_ADMINISTRATOR, A.REGULAR_UPDATES, A.ADMIN_CREDENTIALS_SECURE, A.COMPONENTS_RUNNING, A.RESIDUAL_INFORMATION, OE.PHYSICAL, OE.NO_GENERAL_PURPOSE, OE.NO_THRU_TRAFFIC_PROTECTION, OE.TRUSTED_ADMIN, OE.UPDATES, OE.ADMIN_CREDENTIALS_SECURE, OE.COMPONENTS_RUNNING, OE.RESIDUAL_INFORMATIONSecurity Assurance Requirements (SAR)
ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, AGD_OPE, ALC_CMC.1, ALC_CMS.1, ATE_IND.1, ATE_IND, AVA_VAN.1, AVA_VAN, APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1, APE_SPD.1, ASE_TSS.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.1, ASE_REQ.1, ASE_SPD.1Security Functional Requirements (SFR)
FAU_GEN, FAU_GEN.1, FAU_GEN.2, FAU_STG_EXT, FAU_STG.1, FAU_GEN_EXT, FAU_GEN_EXT.1, FAU_STG_EXT.3, FAU_STG_EXT.4, FAU_STG_EXT.1, FAU_STG, FAU_GEN.1.1, FAU_GEN.1.2, FAU_GEN.2.1, FAU_STG_EXT.1.1, FAU_STG_EXT.1.2, FAU_STG_EXT.1.3, FAU_STG.1.1, FAU_STG.1.2, FAU_STG_EXT.2, FAU_STG.3, FAU_GEN_EXT.1.1, FAU_STG_EXT.3.1, FAU_STG_EXT.4.1, FAU_STG_EXT.2.1, FCO_CPC_EXT, FCO_CPC_EXT.1, FCO_CPC_EXT.1.2, FCO_CPC_EXT.1.1, FCO_CPC_EXT.1.3, FCS_CKM, FCS_CKM.1, FCS_CKM.2, FCS_CKM.4, FCS_COP, FCS_COP.1, FCS_RBG_EXT, FCS_RBG_EXT.1, FCS_NTP_EXT, FCS_SSHC_EXT, FCS_SSHS_EXT, FCS_TLSC_EXT, FCS_TLSS_EXT, FCS_NTP_EXT.1, FCS_SSHC_EXT.1, FCS_SSHS_EXT.1, FCS_TLSC_EXT.1, FCS_TLSC_EXT.2, FCS_TLSS_EXT.1, FCS_TLSS_EXT.2, FCS_CKM.1.1, FCS_CKM.2.1, FCS_CKM.4.1, FCS_RBG_EXT.1.1, FCS_RBG_EXT.1.2, FCS_SSHC_EXT.1.8, FCS_SSHS_EXT.1.8, FCS_TLSC_EXT.1.2, FCS_NTP_EXT.1.1, FCS_NTP_EXT.1.2, FCS_NTP_EXT.1.3, FCS_NTP_EXT.1.4, FCS_SSHC_EXT.1.1, FCS_SSHC_EXT.1.2, FCS_SSHC_EXT.1.3, FCS_SSHC_EXT.1.4, FCS_SSHC_EXT.1.5, FCS_SSHC_EXT.1.9, FCS_SSHC_EXT.1.6, FCS_SSHC_EXT.1.7, FCS_SSHS_EXT.1.1, FCS_SSHS_EXT.1.2, FCS_SSHS_EXT.1.3, FCS_SSHS_EXT.1.4, FCS_SSHS_EXT.1.5, FCS_SSHS_EXT.1.6, FCS_SSHS_EXT.1.7, FCS_TLSC_EXT.1.1, FCS_TLSC_EXT.1.3, FCS_TLSC_EXT.1.4, FCS_TLSC_EXT.2.1, FCS_TLSC_EXT.2.2, FCS_TLSC_EXT.2.3, FCS_TLSC_EXT.2.4, FCS_TLSC_EXT.2.5, FCS_TLSS_EXT.1.1, FCS_TLSS_EXT.1.2, FCS_TLSS_EXT.1.3, FCS_TLSS_EXT.2.1, FCS_TLSS_EXT.2.2, FCS_TLSS_EXT.2.3, FCS_TLSS_EXT.2.4, FCS_TLSS_EXT.2.5, FCS_TLSS_EXT.2.6, FCS_DTLS_EXT.1.1, FCS_DTLS_EXT.2.1, FCS_TLS_EXT.1.1, FIA_AFL, FIA_PMG_EXT, FIA_PMG_EXT.1, FIA_UIA_EXT, FIA_UIA_EXT.1, FIA_UAU, FIA_UAU_EXT, FIA_UAU_EXT.2, FIA_UAU.7, FIA_AFL.1, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PMG_EXT.1.1, FIA_UIA_EXT.1.1, FIA_UIA_EXT.1.2, FIA_UAU_EXT.2.1, FIA_UAU.7.1, FIA_UAU.1, FIA_UID.1, FMT_MOF, FMT_MTD, FMT_SMF, FMT_SMF.1, FMT_SMR, FMT_SMR.2, FMT_MOF.1, FMT_MTD.1, FMT_SMF.1.1, FMT_SMR.2.1, FMT_SMR.2.2, FMT_SMR.2.3, FMT_SMR.1, FPT_SKP_EXT, FPT_SKP_EXT.1, FPT_APW_EXT, FPT_APW_EXT.1, FPT_TST_EXT, FPT_TST_EXT.1, FPT_TUD_EXT, FPT_TUD_EXT.1, FPT_STM_EXT, FPT_STM_EXT.1, FPT_ITT, FPT_ITT.1, FPT_TST_EXT.2, FPT_TUD_EXT.2, FPT_TUD_EXT.1.2, FPT_TUD_EXT.2.2, FPT_SKP_EXT.1.1, FPT_APW_EXT.1.1, FPT_APW_EXT.1.2, FPT_TST_EXT.1.1, FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.3, FPT_STM_EXT.1.1, FPT_STM_EXT.1.2, FPT_ITT.1.1, FPT_TST_EXT.2.1, FPT_TUD_EXT.2.1, FPT_PTD, FPT_STM, FPT_STM.1, FTA_SSL_EXT, FTA_SSL_EXT.1, FTA_SSL, FTA_SSL.3, FTA_SSL.4, FTA_TAB, FTA_TAB.1, FTA_SSL_EXT.1.1, FTP_ITC, FTP_ITC.1, FTP_TRP, FTP_TRP.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_ITC.2Certification process
out of scope, 16 Figure 4: Distributed TOE use case with Management Component out of scope, 16 Figure 4: Distributed TOE use case with Management Component out of scope.............................................. 17 Figure 5: Management Component required to fulfil, cPP, and such functionality will be specified in other device-type specific cPPs. Also considered out of scope are virus and emailing scanning, intrusion detection/prevention capabilities, Network Address, v2.1, 24-September-2018 Page 17 of 192 Figure 4: Distributed TOE use case with Management Component out of scope For the cases in both Figure 3 and Figure 4, the Management Component may be certified separately, indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. RFC 5647 only applies to the RFC compliant, indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. FCS_SSHS_EXT SSH Server Protocol 1 F I A _ X 5 0 9Standards
FIPS PUB 186-4, NIST SP 800-56B, SP 800-56B, SP 800-131A, NIST SP 800-57, PKCS #1, RFC 2986, RFC 3526, RFC 5280, RFC 6960, RFC 5759, RFC 6347, RFC 4347, RFC 3268, RFC 4492, RFC 5246, RFC 5288, RFC 5289, RFC 6125, RFC 2818, RFC 4301, RFC 4303, RFC 3602, RFC 4106, RFC 4109, RFC 4304, RFC 4868, RFC 5996, RFC 5282, RFC 4945, RFC 2409, RFC 1305, RFC 5905, RFC 4253, RFC 5647, RFC 8332, RFC 6668, RFC 4251, RFC 4346, ISO/IEC 9796-2, ISO/IEC 14888-3, ISO/IEC 10118, ISO/IEC 18031:2011, X.509, CCMB-2017-04-001, CCMB-2017-04-002, CCMB-2017-04-003, CCMB-2017-04-004File metadata
| Title | Microsoft Word - NDcPP v2_1.docx |
|---|---|
| Creation date | D:20180925192013Z |
| Modification date | D:20181002074341-04'00' |
| Pages | 192 |
| Creator | Word |
| Producer | Mac OS X 10.12.6 Quartz PDFContext |
References
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.- 3eTI CyberFence 3e-636 Series Network Security Devices archived
- AhnLab MDS, MDS with MTA, and MDS Manager v2.1 archived
- Alcatel-Lucent Enterprise OmniSwitch series 6465, 6560, 6860, 6865, 6900, 9900 with AOS 8.6.R11 archived
- Arista Networks Switches EOS 4.22.1FX-CC archived
- Aruba ClearPass Policy Manager 6.9 archived
- Aruba Mobility Controller with ArubaOS 8.6 archived
- Aruba Mobility Master with ArubaOS 8.2 archived
- Aruba, a Hewlett Packard Enterprise Company 2930F, 2930M, 3810M, and 5400R Switch Series running ArubaOS version 16.08 archived
- BlackBerry SecuGATE version 4.0 archived
- Cisco ASA 9.12 running on Firepower 4100 and 9300 Security Appliances archived
- Cisco Adaptive Security Appliances (ASA) 5500, Industrial Security Appliances (ISA) 3000 and Adaptive Security Appliances Virtual (ASAv) Version 9.12 archived
- Cisco Adaptive Security Appliances (ASA) 9.12 running on Firepower 2100 Series Appliances archived
- Cisco Email Security Appliance with AsyncOS 13.0 active
- Cisco Network Convergence System (NCS) 1000 Series archived
- Cisco Stealthwatch Enterprise 7.1 archived
- CommScope Technologies LLC, Ruckus FastIron ICX 7450 Series Router 8.0.70 with IPsec VPN archived
- CommScope Technologies LLC, Ruckus FastIron ICX Series Switch/Router 8.0.70 archived
- Dell EMC Networking Platforms running Dell EMC Networking OS 9.14 archived
- Dell EMC Networking SmartFabric OS10 v10.5.1 archived
- Extreme Networks, Inc. SLX Product Series operating with Version 20.1.1aa archived
- F5 BIG-IP 14.1.0 for LTM+APM archived
- FlashArray//X running Purity//FA 5.3 archived
- Huawei AR6000 and AR600 Series Routers running VRP software V300R019C11SPC200 Patch V300R019C11HP0095T active
- Huawei ATN Series Routers running VRP software, version V300R006C10SPC300 active
- Huawei CE16800&CE12800&CE8800&CE6800 Series Switches running VRP software version V200R019C10SPC800 Patch V200R019SPH008T active
- Huawei CX600 and PTN 6900 Series Routers running VRP software version V800R021C00SPC100 active
- Huawei CloudEngine S Series Switches running VRP software TOE Software Version 200R020C00SPC300 TOE Patch Version V200R020SPH507T active
- Huawei NE40E and NetEngine 8000 Series Routers running VRP software V800R012C00SPC300 active
- IBM QRadar Security Intelligence Platform, version 7.3.2 archived
- Ixia, A Keysight Business Vision Series Network Packet Broker v5.3.0 archived
- Juniper Junos OS 19.2R1 for MX204 AND EX9251 archived
- Juniper Junos OS 19.3R1 for MX10003 and EX9253 archived
- Juniper Junos OS 20.2R1 for SRX345, SRX345-DUAL-AC, SRX380 and SRX1500 archived
- Junos OS 19.1R2 for EX2300, EX2300-C and EX3400 archived
- Junos OS 19.2R1 for SRX1500, SRX4100, SRX4200 and SRX4600 Series archived
- Junos OS 19.2R1 for SRX300, SRX320, SRX340, SRX345, SRX345-DUAL-AC and SRX550M Series archived
- Junos OS 19.2R1-S2 for SRX5400, SRX5600 and SRX5800 Series archived
- Junos OS 19.3R1 for QFX5120, QFX5210 and EX4650 archived
- Junos OS 19.4R1 for EX4300-48MP archived
- Junos OS 20.2R1-S1 for QFX5120-48T, QFX5120-48Y, QFX5120-32C, QFX5210-64C, EX4650-48Y and QFX5200-48Y archived
- Junos OS 20.3R1 for ACX5448-M archived
- Junos OS 20.4R1 for SRX345, SRX345-DUAL-AC and SRX380 in Cluster Mode active
- MAGNUM-HW-C-CC archived
- MMA10G EXE Series archived
- MMA10G-IPX Series v3.2 archived
- NetIron Family MLXE and CER devices with Multi-Service Iron Ware R06.3.00aa archived
- Netscout nGeniusPULSE Server v3.2 archived
- PacStar 451/453/455 Series with Cisco ASAv 9.12 archived
- Palo Alto Networks M-100, M-200, M-500, and M-600 Hardware, and Virtual Appliances all running Panorama 8.1.10 archived
- Palo Alto Networks M-100, M-200, M-500, and M-600 Hardware, and Virtual Appliances all running Panorama 9.0 archived
- Palo Alto Networks PA-220 Series, PA-800 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, PA-7000 Series, and VM Series Next-Generation Firewall with PAN-OS 9.0 archived
- Palo Alto Networks WF-500 with WildFire 8.1.11 archived
- Palo Alto Networks WF-500 with WildFire 9.0 archived
- Pulse Connect Secure v9.1 archived
- Pulse Policy Secure v.9.1 archived
- RedSeal Server v9.4 archived
- SonicWall Secure Mobile Access (SMA) v12.1 archived
- WatchGuard Fireware OS v12.6.2 on Firebox NGFWs archived
- mTera Universal Transport Platform version MT5.1.2 archived
Updates Feed
-
The protection profile was first processed.
Raw data
{
"_id": "00d2d35fc948189c",
"_type": "sec_certs.sample.protection_profile.ProtectionProfile",
"dgst": "00d2d35fc948189c",
"heuristics": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
},
"pdf_data": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
"pp_filename": "CPP_ND_V2.1.pdf",
"pp_keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 5,
"ECDHE": 6
},
"ECDSA": {
"ECDSA": 5
}
},
"FF": {
"DH": {
"DH": 20,
"DHE": 6,
"Diffie-Hellman": 23
},
"DSA": {
"DSA": 1
}
}
},
"cc_cert_id": {},
"cc_claims": {
"A": {
"A.ADMIN_CREDENTIALS_SECURE": 2,
"A.COMPONENTS_RUNNING": 6,
"A.LIMITED_FUNCTIONALITY": 2,
"A.NO_THRU_TRAFFIC_PROTECTION": 3,
"A.PHYSICAL_PROTECTION": 2,
"A.REGULAR_UPDATES": 2,
"A.RESIDUAL_INFORMATION": 2,
"A.TRUSTED_ADMINISTRATOR": 2
},
"OE": {
"OE.ADMIN_CREDENTIALS_SECURE": 3,
"OE.COMPONENTS_RUNNING": 3,
"OE.NO_GENERAL_PURPOSE": 3,
"OE.NO_THRU_TRAFFIC_PROTECTION": 3,
"OE.PHYSICAL": 3,
"OE.RESIDUAL_INFORMATION": 3,
"OE.TRUSTED_ADMIN": 3,
"OE.UPDATES": 3
},
"T": {
"T.PASSWORD_CRACKING": 4,
"T.SECURITY_FUNCTIONALITY_COMPROMISE": 2,
"T.SECURITY_FUNCTIONALITY_FAILURE": 2,
"T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 2,
"T.UNDETECTED_ACTIVITY": 3,
"T.UNTRUSTED_COMMUNICATION_CHANNELS": 4,
"T.UPDATE_COMPROMISE": 2,
"T.WEAK_AUTHENTICATION_ENDPOINTS": 2,
"T.WEAK_CRYPTOGRAPHY": 2
}
},
"cc_protection_profile_id": {},
"cc_sar": {
"ADV": {
"ADV_FSP.1": 4
},
"AGD": {
"AGD_OPE": 8,
"AGD_OPE.1": 3,
"AGD_PRE.1": 3
},
"ALC": {
"ALC_CMC.1": 4,
"ALC_CMS.1": 4
},
"APE": {
"APE_CCL.1": 1,
"APE_ECD.1": 1,
"APE_INT.1": 1,
"APE_OBJ.1": 1,
"APE_REQ.1": 1,
"APE_SPD.1": 1
},
"ASE": {
"ASE_CCL.1": 1,
"ASE_ECD.1": 1,
"ASE_INT.1": 1,
"ASE_OBJ.1": 1,
"ASE_REQ.1": 1,
"ASE_SPD.1": 1,
"ASE_TSS.1": 4
},
"ATE": {
"ATE_IND": 1,
"ATE_IND.1": 3
},
"AVA": {
"AVA_VAN": 2,
"AVA_VAN.1": 5
}
},
"cc_security_level": {},
"cc_sfr": {
"FAU": {
"FAU_GEN": 24,
"FAU_GEN.1": 13,
"FAU_GEN.1.1": 4,
"FAU_GEN.1.2": 1,
"FAU_GEN.2": 7,
"FAU_GEN.2.1": 1,
"FAU_GEN_EXT": 5,
"FAU_GEN_EXT.1": 19,
"FAU_GEN_EXT.1.1": 2,
"FAU_STG": 8,
"FAU_STG.1": 11,
"FAU_STG.1.1": 1,
"FAU_STG.1.2": 1,
"FAU_STG.3": 2,
"FAU_STG_EXT": 16,
"FAU_STG_EXT.1": 11,
"FAU_STG_EXT.1.1": 7,
"FAU_STG_EXT.1.2": 3,
"FAU_STG_EXT.1.3": 7,
"FAU_STG_EXT.2": 6,
"FAU_STG_EXT.2.1": 1,
"FAU_STG_EXT.3": 15,
"FAU_STG_EXT.3.1": 2,
"FAU_STG_EXT.4": 11,
"FAU_STG_EXT.4.1": 2
},
"FCO": {
"FCO_CPC_EXT": 5,
"FCO_CPC_EXT.1": 24,
"FCO_CPC_EXT.1.1": 5,
"FCO_CPC_EXT.1.2": 12,
"FCO_CPC_EXT.1.3": 3
},
"FCS": {
"FCS_CKM": 8,
"FCS_CKM.1": 40,
"FCS_CKM.1.1": 3,
"FCS_CKM.2": 44,
"FCS_CKM.2.1": 2,
"FCS_CKM.4": 13,
"FCS_CKM.4.1": 1,
"FCS_COP": 176,
"FCS_COP.1": 12,
"FCS_DTLS_EXT.1.1": 1,
"FCS_DTLS_EXT.2.1": 1,
"FCS_NTP_EXT": 7,
"FCS_NTP_EXT.1": 13,
"FCS_NTP_EXT.1.1": 2,
"FCS_NTP_EXT.1.2": 2,
"FCS_NTP_EXT.1.3": 2,
"FCS_NTP_EXT.1.4": 2,
"FCS_RBG_EXT": 6,
"FCS_RBG_EXT.1": 47,
"FCS_RBG_EXT.1.1": 2,
"FCS_RBG_EXT.1.2": 6,
"FCS_SSHC_EXT": 8,
"FCS_SSHC_EXT.1": 11,
"FCS_SSHC_EXT.1.1": 2,
"FCS_SSHC_EXT.1.2": 2,
"FCS_SSHC_EXT.1.3": 2,
"FCS_SSHC_EXT.1.4": 2,
"FCS_SSHC_EXT.1.5": 9,
"FCS_SSHC_EXT.1.6": 2,
"FCS_SSHC_EXT.1.7": 2,
"FCS_SSHC_EXT.1.8": 3,
"FCS_SSHC_EXT.1.9": 3,
"FCS_SSHS_EXT": 8,
"FCS_SSHS_EXT.1": 11,
"FCS_SSHS_EXT.1.1": 2,
"FCS_SSHS_EXT.1.2": 2,
"FCS_SSHS_EXT.1.3": 2,
"FCS_SSHS_EXT.1.4": 2,
"FCS_SSHS_EXT.1.5": 7,
"FCS_SSHS_EXT.1.6": 2,
"FCS_SSHS_EXT.1.7": 2,
"FCS_SSHS_EXT.1.8": 3,
"FCS_TLSC_EXT": 12,
"FCS_TLSC_EXT.1": 13,
"FCS_TLSC_EXT.1.1": 6,
"FCS_TLSC_EXT.1.2": 3,
"FCS_TLSC_EXT.1.3": 3,
"FCS_TLSC_EXT.1.4": 2,
"FCS_TLSC_EXT.2": 12,
"FCS_TLSC_EXT.2.1": 4,
"FCS_TLSC_EXT.2.2": 2,
"FCS_TLSC_EXT.2.3": 3,
"FCS_TLSC_EXT.2.4": 2,
"FCS_TLSC_EXT.2.5": 2,
"FCS_TLSS_EXT": 13,
"FCS_TLSS_EXT.1": 16,
"FCS_TLSS_EXT.1.1": 8,
"FCS_TLSS_EXT.1.2": 2,
"FCS_TLSS_EXT.1.3": 2,
"FCS_TLSS_EXT.2": 11,
"FCS_TLSS_EXT.2.1": 4,
"FCS_TLSS_EXT.2.2": 2,
"FCS_TLSS_EXT.2.3": 2,
"FCS_TLSS_EXT.2.4": 3,
"FCS_TLSS_EXT.2.5": 2,
"FCS_TLSS_EXT.2.6": 2,
"FCS_TLS_EXT.1.1": 2
},
"FIA": {
"FIA_AFL": 2,
"FIA_AFL.1": 8,
"FIA_AFL.1.1": 1,
"FIA_AFL.1.2": 1,
"FIA_PMG_EXT": 4,
"FIA_PMG_EXT.1": 13,
"FIA_PMG_EXT.1.1": 2,
"FIA_UAU": 2,
"FIA_UAU.1": 2,
"FIA_UAU.7": 9,
"FIA_UAU.7.1": 1,
"FIA_UAU_EXT": 5,
"FIA_UAU_EXT.2": 20,
"FIA_UAU_EXT.2.1": 2,
"FIA_UIA_EXT": 6,
"FIA_UIA_EXT.1": 26,
"FIA_UIA_EXT.1.1": 2,
"FIA_UIA_EXT.1.2": 3,
"FIA_UID.1": 2
},
"FMT": {
"FMT_MOF": 50,
"FMT_MOF.1": 5,
"FMT_MTD": 22,
"FMT_MTD.1": 7,
"FMT_SMF": 2,
"FMT_SMF.1": 32,
"FMT_SMF.1.1": 1,
"FMT_SMR": 2,
"FMT_SMR.1": 6,
"FMT_SMR.2": 17,
"FMT_SMR.2.1": 1,
"FMT_SMR.2.2": 2,
"FMT_SMR.2.3": 3
},
"FPT": {
"FPT_APW_EXT": 5,
"FPT_APW_EXT.1": 13,
"FPT_APW_EXT.1.1": 2,
"FPT_APW_EXT.1.2": 2,
"FPT_ITT": 17,
"FPT_ITT.1": 45,
"FPT_ITT.1.1": 1,
"FPT_PTD": 1,
"FPT_SKP_EXT": 5,
"FPT_SKP_EXT.1": 13,
"FPT_SKP_EXT.1.1": 2,
"FPT_STM": 2,
"FPT_STM.1": 2,
"FPT_STM_EXT": 5,
"FPT_STM_EXT.1": 12,
"FPT_STM_EXT.1.1": 2,
"FPT_STM_EXT.1.2": 5,
"FPT_TST_EXT": 7,
"FPT_TST_EXT.1": 13,
"FPT_TST_EXT.1.1": 4,
"FPT_TST_EXT.2": 17,
"FPT_TST_EXT.2.1": 2,
"FPT_TUD_EXT": 9,
"FPT_TUD_EXT.1": 15,
"FPT_TUD_EXT.1.1": 6,
"FPT_TUD_EXT.1.2": 5,
"FPT_TUD_EXT.1.3": 14,
"FPT_TUD_EXT.2": 17,
"FPT_TUD_EXT.2.1": 1,
"FPT_TUD_EXT.2.2": 3
},
"FTA": {
"FTA_SSL": 3,
"FTA_SSL.3": 9,
"FTA_SSL.4": 8,
"FTA_SSL_EXT": 5,
"FTA_SSL_EXT.1": 16,
"FTA_SSL_EXT.1.1": 2,
"FTA_TAB": 2,
"FTA_TAB.1": 14
},
"FTP": {
"FTP_ITC": 17,
"FTP_ITC.1": 69,
"FTP_ITC.1.1": 3,
"FTP_ITC.1.2": 1,
"FTP_ITC.1.3": 2,
"FTP_ITC.2": 6,
"FTP_TRP": 42,
"FTP_TRP.1": 11
}
},
"certification_process": {
"OutOfScope": {
" 16 Figure 4: Distributed TOE use case with Management Component out of scope": 1,
" 16 Figure 4: Distributed TOE use case with Management Component out of scope.............................................. 17 Figure 5: Management Component required to fulfil": 1,
"cPP, and such functionality will be specified in other device-type specific cPPs. Also considered out of scope are virus and emailing scanning, intrusion detection/prevention capabilities, Network Address": 1,
"indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. FCS_SSHS_EXT SSH Server Protocol 1 F I A _ X 5 0 9": 1,
"indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the evaluation activity for this requirement. RFC 5647 only applies to the RFC compliant": 3,
"out of scope": 7,
"v2.1, 24-September-2018 Page 17 of 192 Figure 4: Distributed TOE use case with Management Component out of scope For the cases in both Figure 3 and Figure 4, the Management Component may be certified separately": 1
}
},
"cipher_mode": {
"CBC": {
"CBC": 3
},
"CTR": {
"CTR": 2
},
"GCM": {
"GCM": 13
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IKE": {
"IKE": 11,
"IKEv1": 25,
"IKEv2": 25
},
"IPsec": {
"IPsec": 51
},
"SSH": {
"SSH": 105
},
"TLS": {
"DTLS": {
"DTLS": 162,
"DTLS 1.0": 18,
"DTLS 1.2": 18,
"DTLS v1.0": 8,
"DTLS v1.2": 8
},
"SSL": {
"SSL": 12,
"SSL 2.0": 4,
"SSL 3.0": 4
},
"TLS": {
"TLS": 136,
"TLS 1.0": 4,
"TLS 1.1": 12,
"TLS 1.2": 12,
"TLS v1.0": 4,
"TLS v1.2": 4
}
},
"VPN": {
"VPN": 2
}
},
"crypto_scheme": {
"AEAD": {
"AEAD": 1
},
"MAC": {
"MAC": 39
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 4,
"P-384": 8,
"P-521": 4,
"curve P-384": 4,
"secp256r1": 16,
"secp384r1": 16,
"secp521r1": 16
}
},
"eval_facility": {},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 4,
"SHA1": 2
},
"SHA2": {
"SHA-2": 2,
"SHA-256": 3,
"SHA-384": 3,
"SHA-512": 5,
"SHA256": 26,
"SHA384": 2,
"SHA512": 2
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 3
},
"RNG": {
"RBG": 11
}
},
"side_channel_analysis": {},
"standard_id": {
"CC": {
"CCMB-2017-04-001": 1,
"CCMB-2017-04-002": 1,
"CCMB-2017-04-003": 1,
"CCMB-2017-04-004": 1
},
"FIPS": {
"FIPS PUB 186-4": 5
},
"ISO": {
"ISO/IEC 10118": 2,
"ISO/IEC 14888-3": 1,
"ISO/IEC 18031:2011": 6,
"ISO/IEC 9796-2": 1
},
"NIST": {
"NIST SP 800-56B": 1,
"NIST SP 800-57": 4,
"SP 800-131A": 1,
"SP 800-56B": 1
},
"PKCS": {
"PKCS #1": 1
},
"RFC": {
"RFC 1305": 2,
"RFC 2409": 1,
"RFC 2818": 3,
"RFC 2986": 3,
"RFC 3268": 32,
"RFC 3526": 2,
"RFC 3602": 4,
"RFC 4106": 2,
"RFC 4109": 2,
"RFC 4251": 2,
"RFC 4253": 12,
"RFC 4301": 4,
"RFC 4303": 2,
"RFC 4304": 2,
"RFC 4346": 8,
"RFC 4347": 18,
"RFC 4492": 32,
"RFC 4868": 6,
"RFC 4945": 2,
"RFC 5246": 48,
"RFC 5280": 9,
"RFC 5282": 2,
"RFC 5288": 32,
"RFC 5289": 64,
"RFC 5647": 12,
"RFC 5759": 3,
"RFC 5905": 2,
"RFC 5996": 5,
"RFC 6125": 16,
"RFC 6347": 22,
"RFC 6668": 2,
"RFC 6960": 3,
"RFC 8332": 2
},
"X509": {
"X.509": 46
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 22
}
},
"constructions": {
"MAC": {
"HMAC": 7,
"HMAC-SHA-256": 2,
"HMAC-SHA-384": 3,
"HMAC-SHA-512": 1
}
}
},
"technical_report_id": {},
"tee_name": {},
"tls_cipher_suite": {
"TLS": {
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 8,
"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 8,
"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 8,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 8,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 8,
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 8,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 8,
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 8,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 8,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 8,
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 8,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 8,
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 8,
"TLS_RSA_WITH_AES_128_CBC_SHA": 16,
"TLS_RSA_WITH_AES_128_CBC_SHA256": 8,
"TLS_RSA_WITH_AES_128_GCM_SHA256": 8,
"TLS_RSA_WITH_AES_256_CBC_SHA": 8,
"TLS_RSA_WITH_AES_256_GCM_SHA384": 8
}
},
"vendor": {},
"vulnerability": {}
},
"pp_metadata": {
"/AAPL:Keywords": "[]",
"/CreationDate": "D:20180925192013Z",
"/Creator": "Word",
"/Keywords": "",
"/ModDate": "D:20181002074341-04\u002700\u0027",
"/Producer": "Mac OS X 10.12.6 Quartz PDFContext",
"/Title": "Microsoft Word - NDcPP v2_1.docx",
"pdf_file_size_bytes": 2250701,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 192
},
"report_filename": "ACSC Certification Report EFT-T006_NDcPPv2.1_v1.0.pdf",
"report_keywords": {
"asymmetric_crypto": {},
"cc_cert_id": {},
"cc_claims": {
"A": {
"A.ADMIN_CREDENTIALS_SECURE": 1,
"A.COMPONENTS_RUNNING": 1,
"A.LIMITED_FUNCTIONALITY": 1,
"A.NO_THRU_TRAFFIC_PROTECTION": 1,
"A.PHYSICAL_PROTECTION": 1,
"A.RESIDUAL_INFORMATION": 1,
"A.TRUSTED_ADMINISTRATOR": 1
},
"OE": {
"OE.ADMIN_CREDENTIALS_SECURE": 1,
"OE.COMPONENTS_RUNNING": 1,
"OE.NO_GENERAL_PURPOSE": 1,
"OE.PHYSICAL": 1,
"OE.RESIDUAL_INFORMATION": 1,
"OE.TRUSTED_ADMIN": 1,
"OE.UPDATES": 1
},
"T": {
"T.PASSWORD_CRACKING": 1,
"T.SECURITY_FUNCTIONALITY_COMPROMISE": 1,
"T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 1,
"T.UNDETECTED_ACTIVITY": 1,
"T.UNTRUSTED_COMMUNICATION_CHANNELS": 1,
"T.UPDATE_COMPROMISE": 1,
"T.WEAK_AUTHENTICATION_ENDPOINTS": 1,
"T.WEAK_CRYPTOGRAPHY": 1
}
},
"cc_protection_profile_id": {},
"cc_sar": {
"ADV": {
"ADV_FSP.1": 1
},
"AGD": {
"AGD_OPE": 1,
"AGD_PRE": 1
},
"ALC": {
"ALC_CMC": 1,
"ALC_CMS": 1
},
"APE": {
"APE_CCL.1": 2,
"APE_ECD.1": 2,
"APE_INT.1": 2,
"APE_OBJ.1": 2,
"APE_REQ.1": 2,
"APE_SPD.1": 2
},
"ASE": {
"ASE_CCL": 1,
"ASE_ECD": 1,
"ASE_INT": 1,
"ASE_OBJ": 1,
"ASE_REQ": 1,
"ASE_SPD": 1,
"ASE_TSS": 1
},
"ATE": {
"ATE_IND": 1
},
"AVA": {
"AVA_VAN": 1
}
},
"cc_security_level": {},
"cc_sfr": {
"FAU": {
"FAU_GEN": 2,
"FAU_GEN.1": 1,
"FAU_GEN_EXT": 1,
"FAU_GEN_EXT.1": 1,
"FAU_STG": 1,
"FAU_STG_EXT": 4,
"FAU_STG_EXT.2": 1,
"FAU_STG_EXT.4": 1
},
"FCO": {
"FCO_CPC_EXT": 1,
"FCO_CPC_EXT.1": 1
},
"FCS": {
"FCS_CKM": 3,
"FCS_CKM.2": 2,
"FCS_COP": 4,
"FCS_NTP_EXT": 1,
"FCS_NTP_EXT.1": 1,
"FCS_RBG_EXT": 1,
"FCS_RBG_EXT.1": 1,
"FCS_SSHC_EXT": 1,
"FCS_SSHC_EXT.1.5": 1,
"FCS_SSHS_EXT": 1,
"FCS_SSHS_EXT.1": 1,
"FCS_SSHS_EXT.1.5": 1,
"FCS_TLSC_EXT": 2,
"FCS_TLSC_EXT.1.1": 1,
"FCS_TLSC_EXT.2": 1,
"FCS_TLSS_EXT": 2,
"FCS_TLSS_EXT.2": 1
},
"FIA": {
"FIA_AFL": 1,
"FIA_AFL.1": 1,
"FIA_PMG_EXT": 1,
"FIA_PMG_EXT.1": 1,
"FIA_UAU": 1,
"FIA_UAU_EXT": 1,
"FIA_UAU_EXT.2": 1,
"FIA_UIA_EXT": 1
},
"FMT": {
"FMT_MOF": 4,
"FMT_MTD": 2,
"FMT_SMF": 1,
"FMT_SMR": 1
},
"FPT": {
"FPT_APW_EXT": 1,
"FPT_APW_EXT.1": 1,
"FPT_ITT": 1,
"FPT_SKP_EXT": 1,
"FPT_STM_EXT": 1,
"FPT_STM_EXT.1": 1,
"FPT_TST_EXT": 2,
"FPT_TUD_EXT": 2,
"FPT_TUD_EXT.1": 1
},
"FTA": {
"FTA_SSL": 2,
"FTA_SSL_EXT": 1,
"FTA_SSL_EXT.1": 1,
"FTA_TAB": 1
},
"FTP": {
"FTP_ITC": 1,
"FTP_TRP": 2
}
},
"certification_process": {},
"cipher_mode": {},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IPsec": {
"IPsec": 1
},
"SSH": {
"SSH": 3
},
"TLS": {
"DTLS": {
"DTLS": 4
},
"TLS": {
"TLS": 4,
"TLS1.1": 1,
"TLS1.2": 1
}
}
},
"crypto_scheme": {},
"device_model": {},
"ecc_curve": {},
"eval_facility": {
"Teron": {
"Teron Labs": 3
}
},
"hash_function": {},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {},
"side_channel_analysis": {},
"standard_id": {
"X509": {
"X.509": 4
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 1
}
}
},
"technical_report_id": {},
"tee_name": {
"other": {
"TEE": 1
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"report_metadata": {
"/AAPL:Keywords": "[]",
"/CreationDate": "D:20190930163017Z",
"/Creator": "Word",
"/Keywords": "",
"/ModDate": "D:20191008143714+11\u002700\u0027",
"/Producer": "Mac OS X 10.10.5 Quartz PDFContext",
"/Title": "Microsoft Word - ACSC Certifcation Report EFT-T006_NDcPPv2.1_v0.1.docx",
"pdf_file_size_bytes": 2181440,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 23
}
},
"scheme_metadata": null,
"state": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
"pp": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "2d3c8659b0fcc49451d999ec2c658f003c956cd29b4b8fc14a94507f73b2289a",
"txt_hash": "335781b268713efcfd3259d5019aa043601eb8c6c350b62b4738e7cfb602545c"
},
"report": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "73b547dd9f49a92a01064a34c20a987703e87d13324d36ebba3cc65ef8275690",
"txt_hash": "5154ffe8f8669336e68538d2679227764fe04df4391f3d13660a0035b3c3984d"
}
},
"web_data": {
"_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
"category": "Network and Network-Related Devices and Systems",
"is_collaborative": true,
"maintenances": [],
"name": "collaborative Protection Profile for Network Devices v2.1",
"not_valid_after": "2022-01-11",
"not_valid_before": "2018-09-24",
"pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_ND_V2.1.pdf",
"report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/ACSC Certification Report EFT-T006_NDcPPv2.1_v1.0.pdf",
"scheme": null,
"security_level": {
"_type": "Set",
"elements": [
"None"
]
},
"status": "archived",
"version": "2.1"
}
}