Extended Package for VPN Gateway

Web information ?

Status: archived
Certification date: 2015-12-01
Archived date: 2017-03-08
Scheme: 🇺🇸
Category: Data Protection
Security level: EAL1

Certification report ?

Extracted keywords

Protocols
IKE, VPN

Vendor
Cisco, Cisco Systems

Claims
O.CRYPTOGRAPHIC_FUNCTIONS, O.AUTHENTICATION, O.ADDRESS_FILTERING, O.FAIL_SECURE, O.PORT_FILTERING, T.NETWORK_DISCLOSURE, T.NETWORK_MISUSE, T.DATA_INTEGRITY, T.REPLAY_ATTACK, A.CONNECTIONS, OE.CONNECTIONS
Security Assurance Requirements (SAR)
AVA_VAN, APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1
Security Functional Requirements (SFR)
FIA_AFL, FIA_PSK_EXT, FPT_FLS, FTA_SSL, FTA_TSE, FTA_VCM_EXT, FTP_ITC
Evaluation facilities
Gossamer Security

Standards
X.509

File metadata

Author McGeady, Megan [USA]
Creation date D:20170815135343-04'00'
Modification date D:20170815135409-04'00'
Pages 11
Creator Acrobat PDFMaker 11 for Word
Producer Adobe PDF Library 11.0

Profile ?

Extracted keywords

Symmetric Algorithms
AES, AES-, HMAC
Asymmetric Algorithms
ECDSA, DH
Hash functions
SHA-1, SHA-512
Protocols
SSH, TLS, IKE, IPsec, VPN
Randomness
RBG
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
CBC, GCM

Claims
O.CRYPTOGRAPHIC_FUNCTIONS, O.AUTHENTICATION, O.ADDRESS_FILTERING, O.FAIL_SECURE, O.PORT_FILTERING, O.SYSTEM_MONITORING, O.TOE_ADMINISTRATION, O.RELATED_CONNECTION_FILTERING, O.CLIENT_ESTABLISHMENT_CONSTRAINTS, O.REMOTE_SESSION_TERMINATION, O.ASSIGNED_PRIVATE_ADDRESS, T.NETWORK_DISCLOSURE, T.NETWORK_MISUSE, T.DATA_INTEGRITY, T.REPLAY_ATTACK, T.TSF_FAILURE, T.UNAUTHORIZED_CONNECTION, T.HIJACKED_SESSION, T.UNPROTECTED_TRAFFIC, A.CONNECTIONS, OE.CONNECTIONS
Security Assurance Requirements (SAR)
AVA_VAN.1
Security Functional Requirements (SFR)
FAU_GEN.1, FCS_COP.1, FCS_CKM, FCS_RBG_EXT.1, FCS_COP.1.1, FCS_CKM.1, FIA_AFL.1, FIA_PSK_EXT, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PSK_EXT.1.1, FIA_PSK_EXT.1.2, FIA_PSK_EXT.1.3, FIA_PSK_EXT.1.4, FMT_MOF, FMT_MTD, FMT_SMF.1, FMT_MTD.1, FPT_TST_EXT.1, FPT_TUD_EXT.1, FPT_FLS, FPT_TST_EXT.1.2, FPT_TUD_EXT.1.3, FPT_TUD_EXT.2, FPT_FLS.1, FPT_TST_EXT.1.1, FTA_SSL.3, FTA_TSE.1, FTA_VCM_EXT.1, FTA_SSL.3.1, FTA_TSE.1.1, FTA_VCM_EXT.1.1, FTP_ITC.1, FTP_ITC.1.1

Standards
FIPS PUB 186-4, FIPS 186-4, RFC 4303, RFC 3602, RFC 4106, RFC 791, RFC 2460, RFC 793, RFC 768, RFC792, X.509

File metadata

Creation date D:20151201094334-05'00'
Modification date D:20151201094334-05'00'
Pages 38

Updates ?

  • 04.02.2025 The protection profile was first processed.
    New Protection Profile

    A new Protection Profile with the name Extended Package for VPN Gateway was processed.

Raw data

{
  "_id": "261ef7b66c7adf03",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "261ef7b66c7adf03",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "pp_ndcpp_vpn_gw_ep_v2.0.pdf",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 2
          }
        },
        "FF": {
          "DH": {
            "DH": 2
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.CONNECTIONS": 2
        },
        "O": {
          "O.ADDRESS_FILTERING": 5,
          "O.ASSIGNED_PRIVATE_ADDRESS": 1,
          "O.AUTHENTICATION": 2,
          "O.CLIENT_ESTABLISHMENT_CONSTRAINTS": 1,
          "O.CRYPTOGRAPHIC_FUNCTIONS": 4,
          "O.FAIL_SECURE": 3,
          "O.PORT_FILTERING": 5,
          "O.RELATED_CONNECTION_FILTERING": 1,
          "O.REMOTE_SESSION_TERMINATION": 1,
          "O.SYSTEM_MONITORING": 2,
          "O.TOE_ADMINISTRATION": 1
        },
        "OE": {
          "OE.CONNECTIONS": 2
        },
        "T": {
          "T.DATA_INTEGRITY": 3,
          "T.HIJACKED_SESSION": 1,
          "T.NETWORK_DISCLOSURE": 3,
          "T.NETWORK_MISUSE": 3,
          "T.REPLAY_ATTACK": 3,
          "T.TSF_FAILURE": 2,
          "T.UNAUTHORIZED_CONNECTION": 1,
          "T.UNPROTECTED_TRAFFIC": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "AVA": {
          "AVA_VAN.1": 2
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN.1": 5
        },
        "FCS": {
          "FCS_CKM": 3,
          "FCS_CKM.1": 1,
          "FCS_COP.1": 5,
          "FCS_COP.1.1": 1,
          "FCS_RBG_EXT.1": 3
        },
        "FIA": {
          "FIA_AFL.1": 3,
          "FIA_AFL.1.1": 2,
          "FIA_AFL.1.2": 2,
          "FIA_PSK_EXT": 2,
          "FIA_PSK_EXT.1.1": 1,
          "FIA_PSK_EXT.1.2": 2,
          "FIA_PSK_EXT.1.3": 2,
          "FIA_PSK_EXT.1.4": 1
        },
        "FMT": {
          "FMT_MOF": 3,
          "FMT_MTD": 3,
          "FMT_MTD.1": 1,
          "FMT_SMF.1": 5
        },
        "FPT": {
          "FPT_FLS": 3,
          "FPT_FLS.1": 1,
          "FPT_TST_EXT.1": 4,
          "FPT_TST_EXT.1.1": 1,
          "FPT_TST_EXT.1.2": 3,
          "FPT_TUD_EXT.1": 4,
          "FPT_TUD_EXT.1.3": 1,
          "FPT_TUD_EXT.2": 1
        },
        "FTA": {
          "FTA_SSL.3": 3,
          "FTA_SSL.3.1": 1,
          "FTA_TSE.1": 4,
          "FTA_TSE.1.1": 1,
          "FTA_VCM_EXT.1": 3,
          "FTA_VCM_EXT.1.1": 1
        },
        "FTP": {
          "FTP_ITC.1": 5,
          "FTP_ITC.1.1": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 8
        },
        "IPsec": {
          "IPsec": 18
        },
        "SSH": {
          "SSH": 4
        },
        "TLS": {
          "TLS": {
            "TLS": 4
          }
        },
        "VPN": {
          "VPN": 84
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 2,
          "P-384": 2,
          "P-521": 2
        }
      },
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 1
          },
          "SHA2": {
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RBG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 186-4": 1,
          "FIPS PUB 186-4": 5
        },
        "RFC": {
          "RFC 2460": 3,
          "RFC 3602": 1,
          "RFC 4106": 2,
          "RFC 4303": 1,
          "RFC 768": 3,
          "RFC 791": 3,
          "RFC 793": 3,
          "RFC792": 1
        },
        "X509": {
          "X.509": 3
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 3,
            "AES-": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20151201094334-05\u002700\u0027",
      "/ModDate": "D:20151201094334-05\u002700\u0027",
      "pdf_file_size_bytes": 894860,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.niap-ccevs.org/pp/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 38
    },
    "report_filename": "ep_ndcpp_vpn_gw_ep_v2.0-vr.pdf",
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.CONNECTIONS": 1
        },
        "O": {
          "O.ADDRESS_FILTERING": 1,
          "O.AUTHENTICATION": 1,
          "O.CRYPTOGRAPHIC_FUNCTIONS": 1,
          "O.FAIL_SECURE": 1,
          "O.PORT_FILTERING": 1
        },
        "OE": {
          "OE.CONNECTIONS": 1
        },
        "T": {
          "T.DATA_INTEGRITY": 1,
          "T.NETWORK_DISCLOSURE": 1,
          "T.NETWORK_MISUSE": 1,
          "T.REPLAY_ATTACK": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "APE": {
          "APE_CCL.1": 1,
          "APE_ECD.1": 1,
          "APE_INT.1": 1,
          "APE_OBJ.1": 1,
          "APE_REQ.1": 1
        },
        "AVA": {
          "AVA_VAN": 1
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FIA": {
          "FIA_AFL": 1,
          "FIA_PSK_EXT": 1
        },
        "FPT": {
          "FPT_FLS": 1
        },
        "FTA": {
          "FTA_SSL": 1,
          "FTA_TSE": 1,
          "FTA_VCM_EXT": 1
        },
        "FTP": {
          "FTP_ITC": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 1
        },
        "VPN": {
          "VPN": 22
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "Gossamer": {
          "Gossamer Security": 5
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "X509": {
          "X.509": 1
        }
      },
      "symmetric_crypto": {},
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 21,
          "Cisco Systems": 2
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/Author": "McGeady, Megan [USA]",
      "/Comments": "",
      "/Company": "Booz Allen Hamilton",
      "/CreationDate": "D:20170815135343-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 11 for Word",
      "/Keywords": "",
      "/ModDate": "D:20170815135409-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 11.0",
      "/SourceModified": "D:20170815175332",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 170820,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 11
    }
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "714f5eadfe2c29551c33b23b7fdee06b4eaf2629570035b5e543edc7ff0c8ed1",
      "txt_hash": "36381fb6962c81233b4053817b7efbc31af0f6d21a9c5afb5b34009ec011a785"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "e85bcf8ee5f702f8b956345829b014640a430f380b181bdc872cf99d420b4049",
      "txt_hash": "f58ba136acdd824868de3ff37c6ef20bc9baf4981314b6d1687d2f692a82f822"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Data Protection",
    "is_collaborative": false,
    "maintenances": [],
    "name": "Extended Package for VPN Gateway",
    "not_valid_after": "2017-03-08",
    "not_valid_before": "2015-12-01",
    "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/pp_ndcpp_vpn_gw_ep_v2.0.pdf",
    "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/ep_ndcpp_vpn_gw_ep_v2.0-vr.pdf",
    "scheme": "US",
    "security_level": {
      "_type": "Set",
      "elements": [
        "EAL1"
      ]
    },
    "status": "archived",
    "version": "2.0"
  }
}