This page was not yet optimized for use on mobile devices.

collaborative Protection Profile for Stateful Traffic Filter Firewalls v2.0 + Errata 20180314

Web information

Status	active
Valid from	14.03.2018
Scheme	❌ None
Category	Boundary Protection Devices and Systems
Security level	None

Certification report

Certification report PDF TXT

Extracted keywords

Symmetric Algorithms

AES

Protocols

SSH, TLS, DTLS, IPsec, VPN

Vendor

Cisco

Claims

T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.WEAK_CRYPTOGRAPHY, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.WEAK_AUTHENTICATION_ENDPOINTS, T.UPDATE_COMPROMISE, T.UNDETECTED_ACTIVITY, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.PASSWORD_CRACKING, T.SECURITY_FUNCTIONALITY_FAILURE, T.NETWORK_DISCLOSURE, T.NETWORK_ACCESS, T.NETWORK_MISUSE, T.MALICIOUS_TRAFFIC, A.PHYSICAL_PROTECTION, A.LIMITED_FUNCTIONALITY, A.TRUSTED_ADMINISTRATOR, A.REGULAR_UPDATES, A.ADMIN_CREDENTIALS_SECURE, A.COMPONENTS_RUNNING, A.RESIDUAL_INFORMATION, OE.PHYSICAL, OE.NO_GENERAL_PURPOSE, OE.TRUSTED_ADMIN, OE.UPDATES, OE.ADMIN_CREDENTIALS_SECURE, OE.COMPONENTS_RUNNING, OE.RESIDUAL_INFORMATION

Security Assurance Requirements (SAR)

ADV_FSP.1, AGD_OPE, AGD_PRE, ALC_CMC, ALC_CMS, ATE_IND, AVA_VAN, APE_REQ, APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1, APE_SPD.1, ASE_CCL, ASE_ECD, ASE_INT, ASE_OBJ, ASE_REQ, ASE_SPD, ASE_TSS

Security Functional Requirements (SFR)

FAU_GEN, FAU_STG_EXT, FAU_STG, FCO_CPC_EXT, FCS_CKM, FCS_COP, FCS_RBG_EXT, FCS_SSHC_EXT, FCS_SSHS_EXT, FCS_TLSC_EXT, FCS_TLSS_EXT, FDP_RIP, FIA_AFL, FIA_PMG_EXT, FIA_UIA_EXT, FIA_UAU_EXT, FIA_UAU, FMT_MOF, FMT_MTD, FMT_SMF, FMT_SMR, FPT_APW_EXT, FPT_SKP_EXT, FPT_STM_EXT, FPT_TST_EXT, FPT_TUD_EXT, FPT_ITT, FTA_SSL_EXT, FTA_SSL, FTA_TAB, FTP_ITC, FTP_TRP

Evaluation facilities

Gossamer Security

Standards

X.509

File metadata

Creation date	D:20190906072856-04'00'
Modification date	D:20190906073337-04'00'
Pages	14

Protection Profile

Protection profile PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-, HMAC, HMAC-SHA-384, HMAC-SHA-512, HMAC-SHA-256

Asymmetric Algorithms

ECDHE, ECDH, ECDSA, ECC, Diffie-Hellman, DHE, DH, DSA

Hash functions

SHA-1, SHA-256, SHA-384, SHA-512, SHA256, SHA-2

Schemes

MAC, AEAD

Protocols

SSH, SSL, SSL 2.0, SSL 3.0, TLS, TLS 1.2, TLS 1.1, TLS v1.2, TLS 1.0, TLS v1.0, DTLS, DTLS 1.2, DTLS 1.0, DTLS v1.2, DTLS v1.0, IKEv1, IKEv2, IKE, IPsec, VPN

Randomness

DRBG, RBG

Elliptic Curves

P-256, P-384, P-521, curve P-384, secp256r1, secp384r1, secp521r1

Block cipher modes

CBC, CTR, GCM

TLS cipher suites

TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_192_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_192_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_192_CBC_SHA256, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_192_GCM_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_192_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_192_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

Claims

T.UNAUTHORIZED_ADMINISTRATOR_ACCESS, T.WEAK_CRYPTOGRAPHY, T.UNTRUSTED_COMMUNICATION_CHANNELS, T.WEAK_AUTHENTICATION_ENDPOINTS, T.UPDATE_COMPROMISE, T.UNDETECTED_ACTIVITY, T.SECURITY_FUNCTIONALITY_COMPROMISE, T.PASSWORD_CRACKING, T.SECURITY_FUNCTIONALITY_FAILURE, T.NETWORK_DISCLOSURE, T.NETWORK_MISUSE, T.MALICIOUS_TRAFFIC, A.PHYSICAL_PROTECTION, A.LIMITED_FUNCTIONALITY, A.TRUSTED_ADMINISTRATOR, A.REGULAR_UPDATES, A.ADMIN_CREDENTIALS_SECURE, A.COMPONENTS_RUNNING, A.RESIDUAL_INFORMATION, OE.PHYSICAL, OE.NO_GENERAL_PURPOSE, OE.TRUSTED_ADMIN, OE.UPDATES, OE.ADMIN_CREDENTIALS_SECURE, OE.COMPONENTS_RUNNING, OE.RESIDUAL_INFORMATION

Security Assurance Requirements (SAR)

ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, AGD_OPE, ALC_CMC.1, ALC_CMS.1, ATE_IND.1, ATE_IND, AVA_VAN.1, AVA_VAN, APE_CCL.1, APE_ECD.1, APE_INT.1, APE_OBJ.1, APE_REQ.1, APE_SPD.1, ASE_TSS.1, ASE_CCL.1, ASE_ECD.1, ASE_INT.1, ASE_OBJ.1, ASE_REQ.1, ASE_SPD.1

Security Functional Requirements (SFR)

FAU_GEN, FAU_GEN.1, FAU_GEN.2, FAU_STG_EXT, FAU_STG.1, FAU_STG_EXT.1, FAU_STG, FAU_GEN.1.1, FAU_GEN.1.2, FAU_GEN.2.1, FAU_STG_EXT.1.1, FAU_STG_EXT.1.2, FAU_STG_EXT.1.3, FAU_STG.1.1, FAU_STG.1.2, FAU_STG_EXT.2, FAU_STG.3, FAU_STG_EXT.2.1, FCO_CPC_EXT, FCO_CPC_EXT.1, FCO_CPC_EXT.1.2, FCO_CPC_EXT.1.1, FCO_CPC_EXT.1.3, FCS_CKM, FCS_CKM.1, FCS_CKM.2, FCS_CKM.4, FCS_COP, FCS_COP.1, FCS_RBG_EXT, FCS_RBG_EXT.1, FCS_SSHC_EXT, FCS_SSHS_EXT, FCS_TLSC_EXT, FCS_TLSS_EXT, FCS_SSHC_EXT.1, FCS_SSHS_EXT.1, FCS_TLSC_EXT.1, FCS_TLSC_EXT.2, FCS_TLSS_EXT.1, FCS_TLSS_EXT.2, FCS_CKM.1.1, FCS_CKM.2.1, FCS_CKM.4.1, FCS_RBG_EXT.1.1, FCS_RBG_EXT.1.2, FCS_SSHC_EXT.1.8, FCS_SSHS_EXT.1.8, FCS_TLSC_EXT.1.2, FCS_SSHC_EXT.1.1, FCS_SSHC_EXT.1.2, FCS_SSHC_EXT.1.3, FCS_SSHC_EXT.1.4, FCS_SSHC_EXT.1.5, FCS_SSHC_EXT.1.9, FCS_SSHC_EXT.1.6, FCS_SSHC_EXT.1.7, FCS_SSHS_EXT.1.1, FCS_SSHS_EXT.1.2, FCS_SSHS_EXT.1.3, FCS_SSHS_EXT.1.4, FCS_SSHS_EXT.1.5, FCS_SSHS_EXT.1.6, FCS_SSHS_EXT.1.7, FCS_TLSC_EXT.1.1, FCS_TLSC_EXT.1.3, FCS_TLSC_EXT.1.4, FCS_TLSC_EXT.2.1, FCS_TLSC_EXT.2.2, FCS_TLSC_EXT.2.3, FCS_TLSC_EXT.2.4, FCS_TLSC_EXT.2.5, FCS_TLSS_EXT.1.1, FCS_TLSS_EXT.1.2, FCS_TLSS_EXT.1.3, FCS_TLSS_EXT.2.1, FCS_TLSS_EXT.2.2, FCS_TLSS_EXT.2.3, FCS_TLSS_EXT.2.4, FCS_TLSS_EXT.2.5, FCS_TLSS_EXT.2.6, FCS_DTLS_EXT.1.1, FCS_DTLS_EXT.2.1, FCS_TLS_EXT.1.1, FDP_RIP, FDP_RIP.2, FDP_RIP.2.1, FIA_AFL, FIA_AFL.1, FIA_PMG_EXT, FIA_PMG_EXT.1, FIA_UIA_EXT, FIA_UIA_EXT.1, FIA_UAU, FIA_UAU_EXT, FIA_UAU_EXT.2, FIA_UAU.7, FIA_AFL.1.1, FIA_AFL.1.2, FIA_PMG_EXT.1.1, FIA_UIA_EXT.1.1, FIA_UIA_EXT.1.2, FIA_UAU_EXT.2.1, FIA_UAU.7.1, FIA_UAU.1, FIA_UID.1, FMT_MOF, FMT_MTD, FMT_SMF, FMT_SMF.1, FMT_SMR, FMT_SMR.2, FMT_MOF.1, FMT_MTD.1, FMT_SMF.1.1, FMT_SMR.2.1, FMT_SMR.2.2, FMT_SMR.2.3, FMT_SMR.1, FPT_SKP_EXT, FPT_SKP_EXT.1, FPT_APW_EXT, FPT_APW_EXT.1, FPT_TST_EXT, FPT_TST_EXT.1, FPT_TUD_EXT, FPT_TUD_EXT.1, FPT_STM_EXT, FPT_STM_EXT.1, FPT_ITT, FPT_ITT.1, FPT_TST_EXT.2, FPT_TUD_EXT.2, FPT_TUD_EXT.1.2, FPT_TUD_EXT.2.2, FPT_SKP_EXT.1.1, FPT_APW_EXT.1.1, FPT_APW_EXT.1.2, FPT_TST_EXT.1.1, FPT_TUD_EXT.1.1, FPT_TUD_EXT.1.3, FPT_STM_EXT.1.1, FPT_STM_EXT.1.2, FPT_ITT.1.1, FPT_TST_EXT.2.1, FPT_TUD_EXT.2.1, FPT_PTD, FPT_STM, FPT_STM.1, FTA_SSL_EXT, FTA_SSL_EXT.1, FTA_SSL, FTA_SSL.3, FTA_SSL.4, FTA_TAB, FTA_TAB.1, FTA_SSL_EXT.1.1, FTP_ITC, FTP_ITC.1, FTP_TRP, FTP_TRP.1, FTP_ITC.1.1, FTP_ITC.1.2, FTP_ITC.1.3, FTP_ITC.2

Certification process

out of scope, 16 Figure 4: Distributed TOE use case with Management Component out of scope , 16 Figure 4: Distributed TOE use case with Management Component out of scope ................................................16 Figure 5: Management Component required to, in Error! Reference source not found.. Figure 4: Distributed TOE use case with Management Component out of scope Stateful Traffic Filtering Firewall Component able to fulfill all cPP requirements Focus of, indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT.1.2 The TSF shall ensure that the SSH, indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHS_EXT.1.2 The TSF shall ensure that the SSH, indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT SSH Client Protocol 1 F I A _ X 5 0 9

Standards

FIPS PUB 186-4, NIST SP 800-56B, SP 800-56B, SP 800-131A, NIST SP 800-57, PKCS #1, RFC 2986, RFC 3526, RFC 2460, RFC 5735, RFC 3513, RFC 793, RFC 5280, RFC 6960, RFC 5759, RFC 6347, RFC 4347, RFC 3268, RFC 4492, RFC 5246, RFC 5288, RFC 5289, RFC 6125, RFC 2818, RFC 4301, RFC 4303, RFC 3602, RFC 4106, RFC 4109, RFC 4304, RFC 4868, RFC 5996, RFC 5282, RFC 4945, RFC 2409, RFC 4253, RFC 5647, RFC 6668, RFC 4251, RFC 4346, ISO/IEC 9796-2, ISO/IEC 14888-3, ISO/IEC 10118, ISO/IEC 18031:2011, X.509, CCMB-2012-09-001, CCMB-2012-09-002, CCMB-2012-09-003, CCMB-2012-09-004

File metadata

Creation date	D:20180404100750-04'00'
Modification date	D:20180404100750-04'00'
Pages	192

References

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

F5 BIG-IP 13.1.1 for LTM+AFM archived
F5 BIG-IP 14.1.0 for LTM+AFM archived
Forcepoint NGFW 6.5 archived
Fortinet FortiGate 6000 Series w/ FortiOS 5.6 archived
Fortinet FortiGate w/ FortiOS v5.6.7 archived
Fortinet FortiGate/FortiOS 6.0.9 active
Junos OS 19.2R1 for SRX1500, SRX4100, SRX4200 and SRX4600 Series archived
Junos OS 19.2R1 for SRX300, SRX320, SRX340, SRX345, SRX345-DUAL-AC and SRX550M Series archived
Junos OS 19.2R1-S2 for SRX5400, SRX5600 and SRX5800 Series archived
SonicWall SonicOS Enhanced V6.5.2 archived
SonicWall SonicOS Enhanced V6.5.4 with VPN and IPS on TZ and SOHO Appliances archived

Updates Feed

22.04.2025

The protection profile data changed.
Protection Profile changed

The PDF extraction data was updated.

The report_metadata property was set to {'pdf_file_size_bytes': 435237, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 14, '/CreationDate': "D:20190906072856-04'00'", '/ModDate': "D:20190906073337-04'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': []}}.

The pp_metadata property was set to {'pdf_file_size_bytes': 3130454, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 192, '/CreationDate': "D:20180404100750-04'00'", '/ModDate': "D:20180404100750-04'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['http://www.commoncriteriaportal.org/']}}.

The report_keywords property was set to {'cc_cert_id': {}, 'cc_protection_profile_id': {}, 'cc_security_level': {}, 'cc_sar': {'ADV': {'ADV_FSP.1': 1}, 'AGD': {'AGD_OPE': 1, 'AGD_PRE': 1}, 'ALC': {'ALC_CMC': 1, 'ALC_CMS': 1}, 'ATE': {'ATE_IND': 1}, 'AVA': {'AVA_VAN': 1}, 'APE': {'APE_REQ': 1, 'APE_CCL.1': 1, 'APE_ECD.1': 1, 'APE_INT.1': 1, 'APE_OBJ.1': 1, 'APE_REQ.1': 1, 'APE_SPD.1': 1}, 'ASE': {'ASE_CCL': 1, 'ASE_ECD': 1, 'ASE_INT': 1, 'ASE_OBJ': 1, 'ASE_REQ': 1, 'ASE_SPD': 1, 'ASE_TSS': 1}}, 'cc_sfr': {'FAU': {'FAU_GEN': 2, 'FAU_STG_EXT': 2, 'FAU_STG': 2}, 'FCO': {'FCO_CPC_EXT': 1}, 'FCS': {'FCS_CKM': 3, 'FCS_COP': 4, 'FCS_RBG_EXT': 1, 'FCS_SSHC_EXT': 1, 'FCS_SSHS_EXT': 1, 'FCS_TLSC_EXT': 2, 'FCS_TLSS_EXT': 2}, 'FDP': {'FDP_RIP': 1}, 'FIA': {'FIA_AFL': 1, 'FIA_PMG_EXT': 1, 'FIA_UIA_EXT': 1, 'FIA_UAU_EXT': 1, 'FIA_UAU': 1}, 'FMT': {'FMT_MOF': 4, 'FMT_MTD': 2, 'FMT_SMF': 1, 'FMT_SMR': 1}, 'FPT': {'FPT_APW_EXT': 1, 'FPT_SKP_EXT': 1, 'FPT_STM_EXT': 1, 'FPT_TST_EXT': 2, 'FPT_TUD_EXT': 2, 'FPT_ITT': 1}, 'FTA': {'FTA_SSL_EXT': 1, 'FTA_SSL': 2, 'FTA_TAB': 1}, 'FTP': {'FTP_ITC': 1, 'FTP_TRP': 2}}, 'cc_claims': {'T': {'T.UNAUTHORIZED_ADMINISTRATOR_ACCESS': 1, 'T.WEAK_CRYPTOGRAPHY': 1, 'T.UNTRUSTED_COMMUNICATION_CHANNELS': 1, 'T.WEAK_AUTHENTICATION_ENDPOINTS': 1, 'T.UPDATE_COMPROMISE': 1, 'T.UNDETECTED_ACTIVITY': 1, 'T.SECURITY_FUNCTIONALITY_COMPROMISE': 1, 'T.PASSWORD_CRACKING': 1, 'T.SECURITY_FUNCTIONALITY_FAILURE': 1, 'T.NETWORK_DISCLOSURE': 1, 'T.NETWORK_ACCESS': 1, 'T.NETWORK_MISUSE': 1, 'T.MALICIOUS_TRAFFIC': 1}, 'A': {'A.PHYSICAL_PROTECTION': 1, 'A.LIMITED_FUNCTIONALITY': 1, 'A.TRUSTED_ADMINISTRATOR': 1, 'A.REGULAR_UPDATES': 1, 'A.ADMIN_CREDENTIALS_SECURE': 1, 'A.COMPONENTS_RUNNING': 1, 'A.RESIDUAL_INFORMATION': 1}, 'OE': {'OE.PHYSICAL': 1, 'OE.NO_GENERAL_PURPOSE': 1, 'OE.TRUSTED_ADMIN': 1, 'OE.UPDATES': 1, 'OE.ADMIN_CREDENTIALS_SECURE': 1, 'OE.COMPONENTS_RUNNING': 1, 'OE.RESIDUAL_INFORMATION': 1}}, 'vendor': {'Cisco': {'Cisco': 70}}, 'eval_facility': {'Gossamer': {'Gossamer Security': 4}}, 'symmetric_crypto': {'AES_competition': {'AES': {'AES': 1}}}, 'asymmetric_crypto': {}, 'pq_crypto': {}, 'hash_function': {}, 'crypto_scheme': {}, 'crypto_protocol': {'SSH': {'SSH': 2}, 'TLS': {'TLS': {'TLS': 4}, 'DTLS': {'DTLS': 4}}, 'IPsec': {'IPsec': 1}, 'VPN': {'VPN': 1}}, 'randomness': {}, 'cipher_mode': {}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'technical_report_id': {}, 'device_model': {}, 'tee_name': {}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'X509': {'X.509': 4}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}.

The pp_keywords property was set to {'cc_cert_id': {}, 'cc_protection_profile_id': {}, 'cc_security_level': {}, 'cc_sar': {'ADV': {'ADV_FSP.1': 4}, 'AGD': {'AGD_OPE.1': 3, 'AGD_PRE.1': 3, 'AGD_OPE': 8}, 'ALC': {'ALC_CMC.1': 4, 'ALC_CMS.1': 4}, 'ATE': {'ATE_IND.1': 3, 'ATE_IND': 1}, 'AVA': {'AVA_VAN.1': 5, 'AVA_VAN': 2}, 'APE': {'APE_CCL.1': 1, 'APE_ECD.1': 1, 'APE_INT.1': 1, 'APE_OBJ.1': 1, 'APE_REQ.1': 1, 'APE_SPD.1': 1}, 'ASE': {'ASE_TSS.1': 7, 'ASE_CCL.1': 1, 'ASE_ECD.1': 1, 'ASE_INT.1': 1, 'ASE_OBJ.1': 1, 'ASE_REQ.1': 1, 'ASE_SPD.1': 1}}, 'cc_sfr': {'FAU': {'FAU_GEN': 23, 'FAU_GEN.1': 17, 'FAU_GEN.2': 7, 'FAU_STG_EXT': 16, 'FAU_STG.1': 12, 'FAU_STG_EXT.1': 11, 'FAU_STG': 9, 'FAU_GEN.1.1': 6, 'FAU_GEN.1.2': 1, 'FAU_GEN.2.1': 1, 'FAU_STG_EXT.1.1': 3, 'FAU_STG_EXT.1.2': 3, 'FAU_STG_EXT.1.3': 6, 'FAU_STG.1.1': 1, 'FAU_STG.1.2': 1, 'FAU_STG_EXT.2': 6, 'FAU_STG.3': 2, 'FAU_STG_EXT.2.1': 1}, 'FCO': {'FCO_CPC_EXT': 4, 'FCO_CPC_EXT.1': 25, 'FCO_CPC_EXT.1.2': 12, 'FCO_CPC_EXT.1.1': 5, 'FCO_CPC_EXT.1.3': 3}, 'FCS': {'FCS_CKM': 8, 'FCS_CKM.1': 42, 'FCS_CKM.2': 44, 'FCS_CKM.4': 12, 'FCS_COP': 174, 'FCS_COP.1': 10, 'FCS_RBG_EXT': 6, 'FCS_RBG_EXT.1': 46, 'FCS_SSHC_EXT': 9, 'FCS_SSHS_EXT': 9, 'FCS_TLSC_EXT': 13, 'FCS_TLSS_EXT': 14, 'FCS_SSHC_EXT.1': 11, 'FCS_SSHS_EXT.1': 11, 'FCS_TLSC_EXT.1': 12, 'FCS_TLSC_EXT.2': 10, 'FCS_TLSS_EXT.1': 14, 'FCS_TLSS_EXT.2': 9, 'FCS_CKM.1.1': 3, 'FCS_CKM.2.1': 2, 'FCS_CKM.4.1': 1, 'FCS_RBG_EXT.1.1': 2, 'FCS_RBG_EXT.1.2': 5, 'FCS_SSHC_EXT.1.8': 3, 'FCS_SSHS_EXT.1.8': 3, 'FCS_TLSC_EXT.1.2': 3, 'FCS_SSHC_EXT.1.1': 2, 'FCS_SSHC_EXT.1.2': 2, 'FCS_SSHC_EXT.1.3': 2, 'FCS_SSHC_EXT.1.4': 2, 'FCS_SSHC_EXT.1.5': 7, 'FCS_SSHC_EXT.1.9': 3, 'FCS_SSHC_EXT.1.6': 2, 'FCS_SSHC_EXT.1.7': 2, 'FCS_SSHS_EXT.1.1': 2, 'FCS_SSHS_EXT.1.2': 2, 'FCS_SSHS_EXT.1.3': 2, 'FCS_SSHS_EXT.1.4': 2, 'FCS_SSHS_EXT.1.5': 5, 'FCS_SSHS_EXT.1.6': 2, 'FCS_SSHS_EXT.1.7': 2, 'FCS_TLSC_EXT.1.1': 6, 'FCS_TLSC_EXT.1.3': 3, 'FCS_TLSC_EXT.1.4': 2, 'FCS_TLSC_EXT.2.1': 4, 'FCS_TLSC_EXT.2.2': 2, 'FCS_TLSC_EXT.2.3': 3, 'FCS_TLSC_EXT.2.4': 2, 'FCS_TLSC_EXT.2.5': 2, 'FCS_TLSS_EXT.1.1': 8, 'FCS_TLSS_EXT.1.2': 2, 'FCS_TLSS_EXT.1.3': 2, 'FCS_TLSS_EXT.2.1': 4, 'FCS_TLSS_EXT.2.2': 2, 'FCS_TLSS_EXT.2.3': 2, 'FCS_TLSS_EXT.2.4': 3, 'FCS_TLSS_EXT.2.5': 2, 'FCS_TLSS_EXT.2.6': 2, 'FCS_DTLS_EXT.1.1': 1, 'FCS_DTLS_EXT.2.1': 1, 'FCS_TLS_EXT.1.1': 2}, 'FDP': {'FDP_RIP': 2, 'FDP_RIP.2': 6, 'FDP_RIP.2.1': 1}, 'FIA': {'FIA_AFL': 2, 'FIA_AFL.1': 10, 'FIA_PMG_EXT': 6, 'FIA_PMG_EXT.1': 13, 'FIA_UIA_EXT': 7, 'FIA_UIA_EXT.1': 25, 'FIA_UAU': 2, 'FIA_UAU_EXT': 6, 'FIA_UAU_EXT.2': 20, 'FIA_UAU.7': 8, 'FIA_AFL.1.1': 1, 'FIA_AFL.1.2': 1, 'FIA_PMG_EXT.1.1': 2, 'FIA_UIA_EXT.1.1': 2, 'FIA_UIA_EXT.1.2': 3, 'FIA_UAU_EXT.2.1': 2, 'FIA_UAU.7.1': 1, 'FIA_UAU.1': 2, 'FIA_UID.1': 2}, 'FMT': {'FMT_MOF': 49, 'FMT_MTD': 21, 'FMT_SMF': 2, 'FMT_SMF.1': 26, 'FMT_SMR': 2, 'FMT_SMR.2': 17, 'FMT_MOF.1': 4, 'FMT_MTD.1': 7, 'FMT_SMF.1.1': 1, 'FMT_SMR.2.1': 1, 'FMT_SMR.2.2': 2, 'FMT_SMR.2.3': 3, 'FMT_SMR.1': 6}, 'FPT': {'FPT_SKP_EXT': 6, 'FPT_SKP_EXT.1': 13, 'FPT_APW_EXT': 6, 'FPT_APW_EXT.1': 13, 'FPT_TST_EXT': 8, 'FPT_TST_EXT.1': 13, 'FPT_TUD_EXT': 10, 'FPT_TUD_EXT.1': 15, 'FPT_STM_EXT': 5, 'FPT_STM_EXT.1': 13, 'FPT_ITT': 14, 'FPT_ITT.1': 36, 'FPT_TST_EXT.2': 16, 'FPT_TUD_EXT.2': 17, 'FPT_TUD_EXT.1.2': 5, 'FPT_TUD_EXT.2.2': 3, 'FPT_SKP_EXT.1.1': 2, 'FPT_APW_EXT.1.1': 2, 'FPT_APW_EXT.1.2': 2, 'FPT_TST_EXT.1.1': 4, 'FPT_TUD_EXT.1.1': 4, 'FPT_TUD_EXT.1.3': 14, 'FPT_STM_EXT.1.1': 2, 'FPT_STM_EXT.1.2': 4, 'FPT_ITT.1.1': 1, 'FPT_TST_EXT.2.1': 2, 'FPT_TUD_EXT.2.1': 1, 'FPT_PTD': 1, 'FPT_STM': 2, 'FPT_STM.1': 2}, 'FTA': {'FTA_SSL_EXT': 5, 'FTA_SSL_EXT.1': 16, 'FTA_SSL': 3, 'FTA_SSL.3': 9, 'FTA_SSL.4': 8, 'FTA_TAB': 2, 'FTA_TAB.1': 14, 'FTA_SSL_EXT.1.1': 2}, 'FTP': {'FTP_ITC': 14, 'FTP_ITC.1': 61, 'FTP_TRP': 45, 'FTP_TRP.1': 11, 'FTP_ITC.1.1': 3, 'FTP_ITC.1.2': 1, 'FTP_ITC.1.3': 2, 'FTP_ITC.2': 6}}, 'cc_claims': {'T': {'T.UNAUTHORIZED_ADMINISTRATOR_ACCESS': 2, 'T.WEAK_CRYPTOGRAPHY': 2, 'T.UNTRUSTED_COMMUNICATION_CHANNELS': 4, 'T.WEAK_AUTHENTICATION_ENDPOINTS': 2, 'T.UPDATE_COMPROMISE': 2, 'T.UNDETECTED_ACTIVITY': 3, 'T.SECURITY_FUNCTIONALITY_COMPROMISE': 2, 'T.PASSWORD_CRACKING': 4, 'T.SECURITY_FUNCTIONALITY_FAILURE': 2, 'T.NETWORK_DISCLOSURE': 2, 'T.NETWORK_MISUSE': 2, 'T.MALICIOUS_TRAFFIC': 2}, 'A': {'A.PHYSICAL_PROTECTION': 2, 'A.LIMITED_FUNCTIONALITY': 2, 'A.TRUSTED_ADMINISTRATOR': 2, 'A.REGULAR_UPDATES': 2, 'A.ADMIN_CREDENTIALS_SECURE': 2, 'A.COMPONENTS_RUNNING': 2, 'A.RESIDUAL_INFORMATION': 2}, 'OE': {'OE.PHYSICAL': 3, 'OE.NO_GENERAL_PURPOSE': 3, 'OE.TRUSTED_ADMIN': 3, 'OE.UPDATES': 3, 'OE.ADMIN_CREDENTIALS_SECURE': 3, 'OE.COMPONENTS_RUNNING': 3, 'OE.RESIDUAL_INFORMATION': 3}}, 'vendor': {}, 'eval_facility': {}, 'symmetric_crypto': {'AES_competition': {'AES': {'AES': 21, 'AES-': 1}}, 'constructions': {'MAC': {'HMAC': 7, 'HMAC-SHA-384': 3, 'HMAC-SHA-512': 1, 'HMAC-SHA-256': 2}}}, 'asymmetric_crypto': {'ECC': {'ECDH': {'ECDHE': 6, 'ECDH': 5}, 'ECDSA': {'ECDSA': 5}, 'ECC': {'ECC': 1}}, 'FF': {'DH': {'Diffie-Hellman': 22, 'DHE': 6, 'DH': 20}, 'DSA': {'DSA': 1}}}, 'pq_crypto': {}, 'hash_function': {'SHA': {'SHA1': {'SHA-1': 4}, 'SHA2': {'SHA-256': 4, 'SHA-384': 3, 'SHA-512': 5, 'SHA256': 32, 'SHA-2': 2}}}, 'crypto_scheme': {'MAC': {'MAC': 35}, 'AEAD': {'AEAD': 1}}, 'crypto_protocol': {'SSH': {'SSH': 101}, 'TLS': {'SSL': {'SSL': 12, 'SSL 2.0': 4, 'SSL 3.0': 4}, 'TLS': {'TLS': 131, 'TLS 1.2': 12, 'TLS 1.1': 12, 'TLS v1.2': 4, 'TLS 1.0': 4, 'TLS v1.0': 4}, 'DTLS': {'DTLS': 161, 'DTLS 1.2': 18, 'DTLS 1.0': 18, 'DTLS v1.2': 8, 'DTLS v1.0': 8}}, 'IKE': {'IKEv1': 25, 'IKEv2': 25, 'IKE': 10}, 'IPsec': {'IPsec': 48}, 'VPN': {'VPN': 1}}, 'randomness': {'PRNG': {'DRBG': 3}, 'RNG': {'RBG': 10}}, 'cipher_mode': {'CBC': {'CBC': 3}, 'CTR': {'CTR': 2}, 'GCM': {'GCM': 3}}, 'ecc_curve': {'NIST': {'P-256': 4, 'P-384': 8, 'P-521': 4, 'curve P-384': 4, 'secp256r1': 16, 'secp384r1': 16, 'secp521r1': 16}}, 'crypto_engine': {}, 'tls_cipher_suite': {'TLS': {'TLS_RSA_WITH_AES_128_CBC_SHA': 24, 'TLS_RSA_WITH_AES_192_CBC_SHA': 8, 'TLS_RSA_WITH_AES_256_CBC_SHA': 8, 'TLS_DHE_RSA_WITH_AES_128_CBC_SHA': 8, 'TLS_DHE_RSA_WITH_AES_192_CBC_SHA': 8, 'TLS_DHE_RSA_WITH_AES_256_CBC_SHA': 8, 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA': 8, 'TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA': 8, 'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA': 8, 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA': 8, 'TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA': 8, 'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA': 8, 'TLS_RSA_WITH_AES_128_CBC_SHA256': 8, 'TLS_RSA_WITH_AES_192_CBC_SHA256': 8, 'TLS_RSA_WITH_AES_128_GCM_SHA256': 8, 'TLS_RSA_WITH_AES_192_GCM_SHA256': 8, 'TLS_RSA_WITH_AES_256_GCM_SHA384': 8, 'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256': 8, 'TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA256': 8, 'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384': 8, 'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256': 8, 'TLS_ECDHE_ECDSA_WITH_AES_192_GCM_SHA256': 8, 'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384': 8, 'TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256': 8, 'TLS_ECDHE_RSA_WITH_AES_192_GCM_SHA256': 8, 'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384': 8, 'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256': 8, 'TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA256': 8, 'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384': 8}}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'technical_report_id': {}, 'device_model': {}, 'tee_name': {}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'FIPS': {'FIPS PUB 186-4': 5}, 'NIST': {'NIST SP 800-56B': 1, 'SP 800-56B': 1, 'SP 800-131A': 1, 'NIST SP 800-57': 4}, 'PKCS': {'PKCS #1': 1}, 'RFC': {'RFC 2986': 3, 'RFC 3526': 1, 'RFC 2460': 1, 'RFC 5735': 1, 'RFC 3513': 1, 'RFC 793': 1, 'RFC 5280': 21, 'RFC 6960': 3, 'RFC 5759': 3, 'RFC 6347': 26, 'RFC 4347': 18, 'RFC 3268': 48, 'RFC 4492': 48, 'RFC 5246': 64, 'RFC 5288': 24, 'RFC 5289': 96, 'RFC 6125': 16, 'RFC 2818': 3, 'RFC 4301': 4, 'RFC 4303': 2, 'RFC 3602': 4, 'RFC 4106': 2, 'RFC 4109': 2, 'RFC 4304': 2, 'RFC 4868': 6, 'RFC 5996': 5, 'RFC 5282': 2, 'RFC 4945': 2, 'RFC 2409': 1, 'RFC 4253': 12, 'RFC 5647': 8, 'RFC 6668': 2, 'RFC 4251': 2, 'RFC 4346': 8}, 'ISO': {'ISO/IEC 9796-2': 1, 'ISO/IEC 14888-3': 1, 'ISO/IEC 10118': 2, 'ISO/IEC 18031:2011': 6}, 'X509': {'X.509': 45}, 'CC': {'CCMB-2012-09-001': 1, 'CCMB-2012-09-002': 1, 'CCMB-2012-09-003': 1, 'CCMB-2012-09-004': 1}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {'OutOfScope': {'out of scope': 6, '16 Figure 4: Distributed TOE use case with Management Component out of scope ': 1, '16 Figure 4: Distributed TOE use case with Management Component out of scope ................................................16 Figure 5: Management Component required to': 1, 'in Error! Reference source not found.. Figure 4: Distributed TOE use case with Management Component out of scope Stateful Traffic Filtering Firewall Component able to fulfill all cPP requirements Focus of': 1, 'indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT.1.2 The TSF shall ensure that the SSH': 1, 'indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHS_EXT.1.2 The TSF shall ensure that the SSH': 2, 'indicated as “REQUIRED” but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT SSH Client Protocol 1 F I A _ X 5 0 9': 1}}}.

The state of the protection profile object was updated.

The pp property was updated, with the {'convert_garbage': False, 'convert_ok': True, 'extract_ok': True, 'pdf_hash': 'fc3d71ef3170e414ee5cd4134d53b775ecc29d191d07c7b4144e28a7d56ce617', 'txt_hash': '5d75d72b599ed1f746857bbfc182b6e4c56af7aee7b7688d3694ad2ec2a4c77a'} data.

The report property was updated, with the {'convert_garbage': False, 'convert_ok': True, 'extract_ok': True, 'pdf_hash': '8071d45fe120cf7346b2feee3634251170f8b3ca25f3f2d7e87823918640b794', 'txt_hash': '64016d59c7d4a6f9c78742f9fdeec9e496ea6d6079ece4720ba35b6a4fb52f9c'} data.
14.04.2025

The protection profile data changed.
Protection Profile changed

The PDF extraction data was updated.

The report_metadata property was set to None.

The pp_metadata property was set to None.

The report_keywords property was set to None.

The pp_keywords property was set to None.

The state of the protection profile object was updated.

The pp property was updated, with the {'convert_garbage': True, 'convert_ok': False, 'extract_ok': False, 'pdf_hash': '6adef86c67e4bbbcbc8872bedf10c93c33839884a5cb1ca1d36f080444041ca7', 'txt_hash': None} data.

The report property was updated, with the {'convert_garbage': True, 'convert_ok': False, 'extract_ok': False, 'pdf_hash': '6adef86c67e4bbbcbc8872bedf10c93c33839884a5cb1ca1d36f080444041ca7', 'txt_hash': None} data.
04.02.2025

The protection profile was first processed.

Raw data

{
  "_id": "5c8dd9013898f051",
  "_type": "sec_certs.sample.protection_profile.ProtectionProfile",
  "dgst": "5c8dd9013898f051",
  "heuristics": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"
  },
  "pdf_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData",
    "pp_filename": "CPP_FW_V2.0E.pdf",
    "pp_keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 5,
            "ECDHE": 6
          },
          "ECDSA": {
            "ECDSA": 5
          }
        },
        "FF": {
          "DH": {
            "DH": 20,
            "DHE": 6,
            "Diffie-Hellman": 22
          },
          "DSA": {
            "DSA": 1
          }
        }
      },
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.ADMIN_CREDENTIALS_SECURE": 2,
          "A.COMPONENTS_RUNNING": 2,
          "A.LIMITED_FUNCTIONALITY": 2,
          "A.PHYSICAL_PROTECTION": 2,
          "A.REGULAR_UPDATES": 2,
          "A.RESIDUAL_INFORMATION": 2,
          "A.TRUSTED_ADMINISTRATOR": 2
        },
        "OE": {
          "OE.ADMIN_CREDENTIALS_SECURE": 3,
          "OE.COMPONENTS_RUNNING": 3,
          "OE.NO_GENERAL_PURPOSE": 3,
          "OE.PHYSICAL": 3,
          "OE.RESIDUAL_INFORMATION": 3,
          "OE.TRUSTED_ADMIN": 3,
          "OE.UPDATES": 3
        },
        "T": {
          "T.MALICIOUS_TRAFFIC": 2,
          "T.NETWORK_DISCLOSURE": 2,
          "T.NETWORK_MISUSE": 2,
          "T.PASSWORD_CRACKING": 4,
          "T.SECURITY_FUNCTIONALITY_COMPROMISE": 2,
          "T.SECURITY_FUNCTIONALITY_FAILURE": 2,
          "T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 2,
          "T.UNDETECTED_ACTIVITY": 3,
          "T.UNTRUSTED_COMMUNICATION_CHANNELS": 4,
          "T.UPDATE_COMPROMISE": 2,
          "T.WEAK_AUTHENTICATION_ENDPOINTS": 2,
          "T.WEAK_CRYPTOGRAPHY": 2
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 4
        },
        "AGD": {
          "AGD_OPE": 8,
          "AGD_OPE.1": 3,
          "AGD_PRE.1": 3
        },
        "ALC": {
          "ALC_CMC.1": 4,
          "ALC_CMS.1": 4
        },
        "APE": {
          "APE_CCL.1": 1,
          "APE_ECD.1": 1,
          "APE_INT.1": 1,
          "APE_OBJ.1": 1,
          "APE_REQ.1": 1,
          "APE_SPD.1": 1
        },
        "ASE": {
          "ASE_CCL.1": 1,
          "ASE_ECD.1": 1,
          "ASE_INT.1": 1,
          "ASE_OBJ.1": 1,
          "ASE_REQ.1": 1,
          "ASE_SPD.1": 1,
          "ASE_TSS.1": 7
        },
        "ATE": {
          "ATE_IND": 1,
          "ATE_IND.1": 3
        },
        "AVA": {
          "AVA_VAN": 2,
          "AVA_VAN.1": 5
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN": 23,
          "FAU_GEN.1": 17,
          "FAU_GEN.1.1": 6,
          "FAU_GEN.1.2": 1,
          "FAU_GEN.2": 7,
          "FAU_GEN.2.1": 1,
          "FAU_STG": 9,
          "FAU_STG.1": 12,
          "FAU_STG.1.1": 1,
          "FAU_STG.1.2": 1,
          "FAU_STG.3": 2,
          "FAU_STG_EXT": 16,
          "FAU_STG_EXT.1": 11,
          "FAU_STG_EXT.1.1": 3,
          "FAU_STG_EXT.1.2": 3,
          "FAU_STG_EXT.1.3": 6,
          "FAU_STG_EXT.2": 6,
          "FAU_STG_EXT.2.1": 1
        },
        "FCO": {
          "FCO_CPC_EXT": 4,
          "FCO_CPC_EXT.1": 25,
          "FCO_CPC_EXT.1.1": 5,
          "FCO_CPC_EXT.1.2": 12,
          "FCO_CPC_EXT.1.3": 3
        },
        "FCS": {
          "FCS_CKM": 8,
          "FCS_CKM.1": 42,
          "FCS_CKM.1.1": 3,
          "FCS_CKM.2": 44,
          "FCS_CKM.2.1": 2,
          "FCS_CKM.4": 12,
          "FCS_CKM.4.1": 1,
          "FCS_COP": 174,
          "FCS_COP.1": 10,
          "FCS_DTLS_EXT.1.1": 1,
          "FCS_DTLS_EXT.2.1": 1,
          "FCS_RBG_EXT": 6,
          "FCS_RBG_EXT.1": 46,
          "FCS_RBG_EXT.1.1": 2,
          "FCS_RBG_EXT.1.2": 5,
          "FCS_SSHC_EXT": 9,
          "FCS_SSHC_EXT.1": 11,
          "FCS_SSHC_EXT.1.1": 2,
          "FCS_SSHC_EXT.1.2": 2,
          "FCS_SSHC_EXT.1.3": 2,
          "FCS_SSHC_EXT.1.4": 2,
          "FCS_SSHC_EXT.1.5": 7,
          "FCS_SSHC_EXT.1.6": 2,
          "FCS_SSHC_EXT.1.7": 2,
          "FCS_SSHC_EXT.1.8": 3,
          "FCS_SSHC_EXT.1.9": 3,
          "FCS_SSHS_EXT": 9,
          "FCS_SSHS_EXT.1": 11,
          "FCS_SSHS_EXT.1.1": 2,
          "FCS_SSHS_EXT.1.2": 2,
          "FCS_SSHS_EXT.1.3": 2,
          "FCS_SSHS_EXT.1.4": 2,
          "FCS_SSHS_EXT.1.5": 5,
          "FCS_SSHS_EXT.1.6": 2,
          "FCS_SSHS_EXT.1.7": 2,
          "FCS_SSHS_EXT.1.8": 3,
          "FCS_TLSC_EXT": 13,
          "FCS_TLSC_EXT.1": 12,
          "FCS_TLSC_EXT.1.1": 6,
          "FCS_TLSC_EXT.1.2": 3,
          "FCS_TLSC_EXT.1.3": 3,
          "FCS_TLSC_EXT.1.4": 2,
          "FCS_TLSC_EXT.2": 10,
          "FCS_TLSC_EXT.2.1": 4,
          "FCS_TLSC_EXT.2.2": 2,
          "FCS_TLSC_EXT.2.3": 3,
          "FCS_TLSC_EXT.2.4": 2,
          "FCS_TLSC_EXT.2.5": 2,
          "FCS_TLSS_EXT": 14,
          "FCS_TLSS_EXT.1": 14,
          "FCS_TLSS_EXT.1.1": 8,
          "FCS_TLSS_EXT.1.2": 2,
          "FCS_TLSS_EXT.1.3": 2,
          "FCS_TLSS_EXT.2": 9,
          "FCS_TLSS_EXT.2.1": 4,
          "FCS_TLSS_EXT.2.2": 2,
          "FCS_TLSS_EXT.2.3": 2,
          "FCS_TLSS_EXT.2.4": 3,
          "FCS_TLSS_EXT.2.5": 2,
          "FCS_TLSS_EXT.2.6": 2,
          "FCS_TLS_EXT.1.1": 2
        },
        "FDP": {
          "FDP_RIP": 2,
          "FDP_RIP.2": 6,
          "FDP_RIP.2.1": 1
        },
        "FIA": {
          "FIA_AFL": 2,
          "FIA_AFL.1": 10,
          "FIA_AFL.1.1": 1,
          "FIA_AFL.1.2": 1,
          "FIA_PMG_EXT": 6,
          "FIA_PMG_EXT.1": 13,
          "FIA_PMG_EXT.1.1": 2,
          "FIA_UAU": 2,
          "FIA_UAU.1": 2,
          "FIA_UAU.7": 8,
          "FIA_UAU.7.1": 1,
          "FIA_UAU_EXT": 6,
          "FIA_UAU_EXT.2": 20,
          "FIA_UAU_EXT.2.1": 2,
          "FIA_UIA_EXT": 7,
          "FIA_UIA_EXT.1": 25,
          "FIA_UIA_EXT.1.1": 2,
          "FIA_UIA_EXT.1.2": 3,
          "FIA_UID.1": 2
        },
        "FMT": {
          "FMT_MOF": 49,
          "FMT_MOF.1": 4,
          "FMT_MTD": 21,
          "FMT_MTD.1": 7,
          "FMT_SMF": 2,
          "FMT_SMF.1": 26,
          "FMT_SMF.1.1": 1,
          "FMT_SMR": 2,
          "FMT_SMR.1": 6,
          "FMT_SMR.2": 17,
          "FMT_SMR.2.1": 1,
          "FMT_SMR.2.2": 2,
          "FMT_SMR.2.3": 3
        },
        "FPT": {
          "FPT_APW_EXT": 6,
          "FPT_APW_EXT.1": 13,
          "FPT_APW_EXT.1.1": 2,
          "FPT_APW_EXT.1.2": 2,
          "FPT_ITT": 14,
          "FPT_ITT.1": 36,
          "FPT_ITT.1.1": 1,
          "FPT_PTD": 1,
          "FPT_SKP_EXT": 6,
          "FPT_SKP_EXT.1": 13,
          "FPT_SKP_EXT.1.1": 2,
          "FPT_STM": 2,
          "FPT_STM.1": 2,
          "FPT_STM_EXT": 5,
          "FPT_STM_EXT.1": 13,
          "FPT_STM_EXT.1.1": 2,
          "FPT_STM_EXT.1.2": 4,
          "FPT_TST_EXT": 8,
          "FPT_TST_EXT.1": 13,
          "FPT_TST_EXT.1.1": 4,
          "FPT_TST_EXT.2": 16,
          "FPT_TST_EXT.2.1": 2,
          "FPT_TUD_EXT": 10,
          "FPT_TUD_EXT.1": 15,
          "FPT_TUD_EXT.1.1": 4,
          "FPT_TUD_EXT.1.2": 5,
          "FPT_TUD_EXT.1.3": 14,
          "FPT_TUD_EXT.2": 17,
          "FPT_TUD_EXT.2.1": 1,
          "FPT_TUD_EXT.2.2": 3
        },
        "FTA": {
          "FTA_SSL": 3,
          "FTA_SSL.3": 9,
          "FTA_SSL.4": 8,
          "FTA_SSL_EXT": 5,
          "FTA_SSL_EXT.1": 16,
          "FTA_SSL_EXT.1.1": 2,
          "FTA_TAB": 2,
          "FTA_TAB.1": 14
        },
        "FTP": {
          "FTP_ITC": 14,
          "FTP_ITC.1": 61,
          "FTP_ITC.1.1": 3,
          "FTP_ITC.1.2": 1,
          "FTP_ITC.1.3": 2,
          "FTP_ITC.2": 6,
          "FTP_TRP": 45,
          "FTP_TRP.1": 11
        }
      },
      "certification_process": {
        "OutOfScope": {
          "16 Figure 4: Distributed TOE use case with Management Component out of scope ": 1,
          "16 Figure 4: Distributed TOE use case with Management Component out of scope ................................................16 Figure 5: Management Component required to": 1,
          "in Error! Reference source not found.. Figure 4: Distributed TOE use case with Management Component out of scope Stateful Traffic Filtering Firewall Component able to fulfill all cPP requirements Focus of": 1,
          "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT SSH Client Protocol 1 F I A _ X 5 0 9": 1,
          "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT.1.2 The TSF shall ensure that the SSH": 1,
          "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHS_EXT.1.2 The TSF shall ensure that the SSH": 2,
          "out of scope": 6
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CTR": {
          "CTR": 2
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 10,
          "IKEv1": 25,
          "IKEv2": 25
        },
        "IPsec": {
          "IPsec": 48
        },
        "SSH": {
          "SSH": 101
        },
        "TLS": {
          "DTLS": {
            "DTLS": 161,
            "DTLS 1.0": 18,
            "DTLS 1.2": 18,
            "DTLS v1.0": 8,
            "DTLS v1.2": 8
          },
          "SSL": {
            "SSL": 12,
            "SSL 2.0": 4,
            "SSL 3.0": 4
          },
          "TLS": {
            "TLS": 131,
            "TLS 1.0": 4,
            "TLS 1.1": 12,
            "TLS 1.2": 12,
            "TLS v1.0": 4,
            "TLS v1.2": 4
          }
        },
        "VPN": {
          "VPN": 1
        }
      },
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "MAC": {
          "MAC": 35
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 4,
          "P-384": 8,
          "P-521": 4,
          "curve P-384": 4,
          "secp256r1": 16,
          "secp384r1": 16,
          "secp521r1": 16
        }
      },
      "eval_facility": {},
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          },
          "SHA2": {
            "SHA-2": 2,
            "SHA-256": 4,
            "SHA-384": 3,
            "SHA-512": 5,
            "SHA256": 32
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 3
        },
        "RNG": {
          "RBG": 10
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "CC": {
          "CCMB-2012-09-001": 1,
          "CCMB-2012-09-002": 1,
          "CCMB-2012-09-003": 1,
          "CCMB-2012-09-004": 1
        },
        "FIPS": {
          "FIPS PUB 186-4": 5
        },
        "ISO": {
          "ISO/IEC 10118": 2,
          "ISO/IEC 14888-3": 1,
          "ISO/IEC 18031:2011": 6,
          "ISO/IEC 9796-2": 1
        },
        "NIST": {
          "NIST SP 800-56B": 1,
          "NIST SP 800-57": 4,
          "SP 800-131A": 1,
          "SP 800-56B": 1
        },
        "PKCS": {
          "PKCS #1": 1
        },
        "RFC": {
          "RFC 2409": 1,
          "RFC 2460": 1,
          "RFC 2818": 3,
          "RFC 2986": 3,
          "RFC 3268": 48,
          "RFC 3513": 1,
          "RFC 3526": 1,
          "RFC 3602": 4,
          "RFC 4106": 2,
          "RFC 4109": 2,
          "RFC 4251": 2,
          "RFC 4253": 12,
          "RFC 4301": 4,
          "RFC 4303": 2,
          "RFC 4304": 2,
          "RFC 4346": 8,
          "RFC 4347": 18,
          "RFC 4492": 48,
          "RFC 4868": 6,
          "RFC 4945": 2,
          "RFC 5246": 64,
          "RFC 5280": 21,
          "RFC 5282": 2,
          "RFC 5288": 24,
          "RFC 5289": 96,
          "RFC 5647": 8,
          "RFC 5735": 1,
          "RFC 5759": 3,
          "RFC 5996": 5,
          "RFC 6125": 16,
          "RFC 6347": 26,
          "RFC 6668": 2,
          "RFC 6960": 3,
          "RFC 793": 1
        },
        "X509": {
          "X.509": 45
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 21,
            "AES-": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 7,
            "HMAC-SHA-256": 2,
            "HMAC-SHA-384": 3,
            "HMAC-SHA-512": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 8,
          "TLS_DHE_RSA_WITH_AES_192_CBC_SHA": 8,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA256": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_192_GCM_SHA256": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 8,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 8,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 8,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 8,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 8,
          "TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA": 8,
          "TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA256": 8,
          "TLS_ECDHE_RSA_WITH_AES_192_GCM_SHA256": 8,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 8,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 8,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 8,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 24,
          "TLS_RSA_WITH_AES_128_CBC_SHA256": 8,
          "TLS_RSA_WITH_AES_128_GCM_SHA256": 8,
          "TLS_RSA_WITH_AES_192_CBC_SHA": 8,
          "TLS_RSA_WITH_AES_192_CBC_SHA256": 8,
          "TLS_RSA_WITH_AES_192_GCM_SHA256": 8,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 8,
          "TLS_RSA_WITH_AES_256_GCM_SHA384": 8
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "pp_metadata": {
      "/CreationDate": "D:20180404100750-04\u002700\u0027",
      "/ModDate": "D:20180404100750-04\u002700\u0027",
      "pdf_file_size_bytes": 3130454,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.commoncriteriaportal.org/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 192
    },
    "report_filename": "cPP_FW_V2.0E-vr.pdf",
    "report_keywords": {
      "asymmetric_crypto": {},
      "cc_cert_id": {},
      "cc_claims": {
        "A": {
          "A.ADMIN_CREDENTIALS_SECURE": 1,
          "A.COMPONENTS_RUNNING": 1,
          "A.LIMITED_FUNCTIONALITY": 1,
          "A.PHYSICAL_PROTECTION": 1,
          "A.REGULAR_UPDATES": 1,
          "A.RESIDUAL_INFORMATION": 1,
          "A.TRUSTED_ADMINISTRATOR": 1
        },
        "OE": {
          "OE.ADMIN_CREDENTIALS_SECURE": 1,
          "OE.COMPONENTS_RUNNING": 1,
          "OE.NO_GENERAL_PURPOSE": 1,
          "OE.PHYSICAL": 1,
          "OE.RESIDUAL_INFORMATION": 1,
          "OE.TRUSTED_ADMIN": 1,
          "OE.UPDATES": 1
        },
        "T": {
          "T.MALICIOUS_TRAFFIC": 1,
          "T.NETWORK_ACCESS": 1,
          "T.NETWORK_DISCLOSURE": 1,
          "T.NETWORK_MISUSE": 1,
          "T.PASSWORD_CRACKING": 1,
          "T.SECURITY_FUNCTIONALITY_COMPROMISE": 1,
          "T.SECURITY_FUNCTIONALITY_FAILURE": 1,
          "T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 1,
          "T.UNDETECTED_ACTIVITY": 1,
          "T.UNTRUSTED_COMMUNICATION_CHANNELS": 1,
          "T.UPDATE_COMPROMISE": 1,
          "T.WEAK_AUTHENTICATION_ENDPOINTS": 1,
          "T.WEAK_CRYPTOGRAPHY": 1
        }
      },
      "cc_protection_profile_id": {},
      "cc_sar": {
        "ADV": {
          "ADV_FSP.1": 1
        },
        "AGD": {
          "AGD_OPE": 1,
          "AGD_PRE": 1
        },
        "ALC": {
          "ALC_CMC": 1,
          "ALC_CMS": 1
        },
        "APE": {
          "APE_CCL.1": 1,
          "APE_ECD.1": 1,
          "APE_INT.1": 1,
          "APE_OBJ.1": 1,
          "APE_REQ": 1,
          "APE_REQ.1": 1,
          "APE_SPD.1": 1
        },
        "ASE": {
          "ASE_CCL": 1,
          "ASE_ECD": 1,
          "ASE_INT": 1,
          "ASE_OBJ": 1,
          "ASE_REQ": 1,
          "ASE_SPD": 1,
          "ASE_TSS": 1
        },
        "ATE": {
          "ATE_IND": 1
        },
        "AVA": {
          "AVA_VAN": 1
        }
      },
      "cc_security_level": {},
      "cc_sfr": {
        "FAU": {
          "FAU_GEN": 2,
          "FAU_STG": 2,
          "FAU_STG_EXT": 2
        },
        "FCO": {
          "FCO_CPC_EXT": 1
        },
        "FCS": {
          "FCS_CKM": 3,
          "FCS_COP": 4,
          "FCS_RBG_EXT": 1,
          "FCS_SSHC_EXT": 1,
          "FCS_SSHS_EXT": 1,
          "FCS_TLSC_EXT": 2,
          "FCS_TLSS_EXT": 2
        },
        "FDP": {
          "FDP_RIP": 1
        },
        "FIA": {
          "FIA_AFL": 1,
          "FIA_PMG_EXT": 1,
          "FIA_UAU": 1,
          "FIA_UAU_EXT": 1,
          "FIA_UIA_EXT": 1
        },
        "FMT": {
          "FMT_MOF": 4,
          "FMT_MTD": 2,
          "FMT_SMF": 1,
          "FMT_SMR": 1
        },
        "FPT": {
          "FPT_APW_EXT": 1,
          "FPT_ITT": 1,
          "FPT_SKP_EXT": 1,
          "FPT_STM_EXT": 1,
          "FPT_TST_EXT": 2,
          "FPT_TUD_EXT": 2
        },
        "FTA": {
          "FTA_SSL": 2,
          "FTA_SSL_EXT": 1,
          "FTA_TAB": 1
        },
        "FTP": {
          "FTP_ITC": 1,
          "FTP_TRP": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IPsec": {
          "IPsec": 1
        },
        "SSH": {
          "SSH": 2
        },
        "TLS": {
          "DTLS": {
            "DTLS": 4
          },
          "TLS": {
            "TLS": 4
          }
        },
        "VPN": {
          "VPN": 1
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "Gossamer": {
          "Gossamer Security": 4
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "X509": {
          "X.509": 4
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 1
          }
        }
      },
      "technical_report_id": {},
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 70
        }
      },
      "vulnerability": {}
    },
    "report_metadata": {
      "/CreationDate": "D:20190906072856-04\u002700\u0027",
      "/ModDate": "D:20190906073337-04\u002700\u0027",
      "pdf_file_size_bytes": 435237,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 14
    }
  },
  "state": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState",
    "pp": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "fc3d71ef3170e414ee5cd4134d53b775ecc29d191d07c7b4144e28a7d56ce617",
      "txt_hash": "5d75d72b599ed1f746857bbfc182b6e4c56af7aee7b7688d3694ad2ec2a4c77a"
    },
    "report": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_garbage": false,
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "pdf_hash": "8071d45fe120cf7346b2feee3634251170f8b3ca25f3f2d7e87823918640b794",
      "txt_hash": "64016d59c7d4a6f9c78742f9fdeec9e496ea6d6079ece4720ba35b6a4fb52f9c"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData",
    "category": "Boundary Protection Devices and Systems",
    "is_collaborative": true,
    "maintenances": [],
    "name": "collaborative Protection Profile for Stateful Traffic Filter Firewalls v2.0 + Errata 20180314",
    "not_valid_after": null,
    "not_valid_before": "2018-03-14",
    "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_FW_V2.0E.pdf",
    "report_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/cPP_FW_V2.0E-vr.pdf",
    "scheme": null,
    "security_level": {
      "_type": "Set",
      "elements": [
        "None"
      ]
    },
    "status": "active",
    "version": "2.0E"
  }
}

Sections

collaborative Protection Profile for Stateful Traffic Filter Firewalls v2.0 + Errata 20180314

Web information

Certification report

Extracted keywords

Symmetric Algorithms

Protocols

Vendor

Claims

Security Assurance Requirements (SAR)

Security Functional Requirements (SFR)

Evaluation facilities

Standards

File metadata

Protection Profile

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Claims

Security Assurance Requirements (SAR)

Security Functional Requirements (SFR)

Certification process

Standards

File metadata

References

Automated inference - use with caution

Updates Feed

Protection Profile changed

Protection Profile changed

New Protection Profile

Raw data

Sections

collaborative Protection Profile for Stateful Traffic Filter Firewalls v2.0 + Errata 20180314

Web information

Certification report

Extracted keywords

Cryptography

Symmetric Algorithms

Protocols

Device

Vendor

Common Criteria

Claims

Security Assurance Requirements (SAR)

Security Functional Requirements (SFR)

Evaluation facilities

Other

Standards

File metadata

Protection Profile

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Common Criteria

Claims

Security Assurance Requirements (SAR)

Security Functional Requirements (SFR)

Security

Certification process

Other

Standards

File metadata

References

Automated inference - use with caution

Updates Feed

Raw data

Toggle raw data