{"_id": "895673b402be87ed", "_type": "sec_certs.sample.protection_profile.ProtectionProfile", "dgst": "895673b402be87ed", "web_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.WebData", "category": "Boundary Protection Devices and Systems", "status": "archived", "is_collaborative": true, "name": "collaborative Protection Profile for Stateful Traffic Filter Firewalls v2.0", "version": "2.0", "security_level": {"_type": "Set", "elements": ["None"]}, "not_valid_before": "2017-12-06", "not_valid_after": "2018-03-14", "report_link": "https://www.commoncriteriaportal.org#no_cert", "pp_link": "https://www.commoncriteriaportal.org/nfs/ccpfiles/files/ppfiles/CPP_FW_V2.0.pdf", "scheme": null, "maintenances": []}, "pdf_data": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.PdfData", "report_metadata": null, "pp_metadata": {"pdf_file_size_bytes": 2621186, "pdf_is_encrypted": false, "pdf_number_of_pages": 192, "/Title": "Microsoft Word - FW cPP v2 Final.docx", "/Producer": "Mac OS X 10.12.6 Quartz PDFContext", "/Creator": "Word", "/CreationDate": "D:20171207163537Z00'00'", "/ModDate": "D:20171207163537Z00'00'", "/Keywords": "", "/AAPL:Keywords": "[]", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "report_keywords": null, "pp_keywords": {"cc_cert_id": {}, "cc_protection_profile_id": {}, "cc_security_level": {}, "cc_sar": {"ADV": {"ADV_FSP.1": 4}, "AGD": {"AGD_OPE.1": 3, "AGD_PRE.1": 3, "AGD_OPE": 8}, "ALC": {"ALC_CMC.1": 4, "ALC_CMS.1": 4}, "ATE": {"ATE_IND.1": 3, "ATE_IND": 1}, "AVA": {"AVA_VAN.1": 5, "AVA_VAN": 2}, "APE": {"APE_CCL.1": 1, "APE_ECD.1": 1, "APE_INT.1": 1, "APE_OBJ.1": 1, "APE_REQ.1": 1, "APE_SPD.1": 1}, "ASE": {"ASE_TSS.1": 7, "ASE_CCL.1": 1, "ASE_ECD.1": 1, "ASE_INT.1": 1, "ASE_OBJ.1": 1, "ASE_REQ.1": 1, "ASE_SPD.1": 1}}, "cc_sfr": {"FAU": {"FAU_GEN": 23, "FAU_GEN.1": 17, "FAU_GEN.2": 7, "FAU_STG_EXT": 16, "FAU_STG.1": 12, "FAU_STG_EXT.1": 11, "FAU_STG": 9, "FAU_GEN.1.1": 6, "FAU_GEN.1.2": 1, "FAU_GEN.2.1": 1, "FAU_STG_EXT.1.1": 3, "FAU_STG_EXT.1.2": 3, "FAU_STG_EXT.1.3": 6, "FAU_STG.1.1": 1, "FAU_STG.1.2": 1, "FAU_STG_EXT.2": 6, "FAU_STG.3": 2, "FAU_STG_EXT.2.1": 1}, "FCO": {"FCO_CPC_EXT": 5, "FCO_CPC_EXT.1": 25, "FCO_CPC_EXT.1.2": 12, "FCO_CPC_EXT.1.1": 5, "FCO_CPC_EXT.1.3": 3}, "FCS": {"FCS_CKM": 8, "FCS_CKM.1": 42, "FCS_CKM.2": 44, "FCS_CKM.4": 12, "FCS_COP": 178, "FCS_COP.1": 10, "FCS_RBG_EXT": 7, "FCS_RBG_EXT.1": 46, "FCS_SSHC_EXT": 9, "FCS_SSHS_EXT": 9, "FCS_TLSC_EXT": 13, "FCS_TLSS_EXT": 14, "FCS_SSHC_EXT.1": 11, "FCS_SSHS_EXT.1": 11, "FCS_TLSC_EXT.1": 12, "FCS_TLSC_EXT.2": 10, "FCS_TLSS_EXT.1": 14, "FCS_TLSS_EXT.2": 9, "FCS_CKM.1.1": 3, "FCS_CKM.2.1": 2, "FCS_CKM.4.1": 1, "FCS_RBG_EXT.1.1": 2, "FCS_RBG_EXT.1.2": 5, "FCS_SSHC_EXT.1.8": 3, "FCS_SSHS_EXT.1.8": 3, "FCS_TLSC_EXT.1.2": 3, "FCS_SSHC_EXT.1.1": 2, "FCS_SSHC_EXT.1.2": 2, "FCS_SSHC_EXT.1.3": 2, "FCS_SSHC_EXT.1.4": 2, "FCS_SSHC_EXT.1.5": 7, "FCS_SSHC_EXT.1.9": 3, "FCS_SSHC_EXT.1.6": 2, "FCS_SSHC_EXT.1.7": 2, "FCS_SSHS_EXT.1.1": 2, "FCS_SSHS_EXT.1.2": 2, "FCS_SSHS_EXT.1.3": 2, "FCS_SSHS_EXT.1.4": 2, "FCS_SSHS_EXT.1.5": 5, "FCS_SSHS_EXT.1.6": 2, "FCS_SSHS_EXT.1.7": 2, "FCS_TLSC_EXT.1.1": 6, "FCS_TLSC_EXT.1.3": 3, "FCS_TLSC_EXT.1.4": 2, "FCS_TLSC_EXT.2.1": 4, "FCS_TLSC_EXT.2.2": 2, "FCS_TLSC_EXT.2.3": 3, "FCS_TLSC_EXT.2.4": 2, "FCS_TLSC_EXT.2.5": 2, "FCS_TLSS_EXT.1.1": 8, "FCS_TLSS_EXT.1.2": 2, "FCS_TLSS_EXT.1.3": 2, "FCS_TLSS_EXT.2.1": 4, "FCS_TLSS_EXT.2.2": 2, "FCS_TLSS_EXT.2.3": 2, "FCS_TLSS_EXT.2.4": 3, "FCS_TLSS_EXT.2.5": 2, "FCS_TLSS_EXT.2.6": 2, "FCS_DTLS_EXT.1.1": 1, "FCS_DTLS_EXT.2.1": 1, "FCS_TLS_EXT.1.1": 2}, "FDP": {"FDP_RIP": 2, "FDP_RIP.2": 6, "FDP_RIP.2.1": 1}, "FIA": {"FIA_AFL": 2, "FIA_AFL.1": 10, "FIA_PMG_EXT": 6, "FIA_PMG_EXT.1": 13, "FIA_UIA_EXT": 7, "FIA_UIA_EXT.1": 25, "FIA_UAU": 2, "FIA_UAU_EXT": 5, "FIA_UAU_EXT.2": 20, "FIA_UAU.7": 8, "FIA_AFL.1.1": 1, "FIA_AFL.1.2": 1, "FIA_PMG_EXT.1.1": 2, "FIA_UIA_EXT.1.1": 2, "FIA_UIA_EXT.1.2": 3, "FIA_UAU_EXT.2.1": 2, "FIA_UAU.7.1": 1, "FIA_UAU.1": 2, "FIA_UID.1": 2}, "FMT": {"FMT_MOF": 49, "FMT_MTD": 21, "FMT_SMF": 2, "FMT_SMF.1": 26, "FMT_SMR": 2, "FMT_SMR.2": 17, "FMT_MOF.1": 4, "FMT_MTD.1": 7, "FMT_SMF.1.1": 1, "FMT_SMR.2.1": 1, "FMT_SMR.2.2": 2, "FMT_SMR.2.3": 3, "FMT_SMR.1": 6}, "FPT": {"FPT_SKP_EXT": 6, "FPT_SKP_EXT.1": 13, "FPT_APW_EXT": 6, "FPT_APW_EXT.1": 13, "FPT_TST_EXT": 8, "FPT_TST_EXT.1": 13, "FPT_TUD_EXT": 10, "FPT_TUD_EXT.1": 15, "FPT_STM_EXT": 5, "FPT_STM": 5, "FPT_ITT": 14, "FPT_ITT.1": 36, "FPT_TST_EXT.2": 16, "FPT_TUD_EXT.2": 17, "FPT_STM_EXT.1": 10, "FPT_TUD_EXT.1.2": 5, "FPT_TUD_EXT.2.2": 3, "FPT_SKP_EXT.1.1": 2, "FPT_APW_EXT.1.1": 2, "FPT_APW_EXT.1.2": 2, "FPT_TST_EXT.1.1": 4, "FPT_TUD_EXT.1.1": 4, "FPT_TUD_EXT.1.3": 14, "FPT_STM_EXT.1.1": 2, "FPT_STM_EXT.1.2": 4, "FPT_ITT.1.1": 1, "FPT_TST_EXT.2.1": 2, "FPT_TUD_EXT.2.1": 1, "FPT_PTD": 1, "FPT_STM.1": 2}, "FTA": {"FTA_SSL_EXT": 5, "FTA_SSL_EXT.1": 16, "FTA_SSL": 3, "FTA_SSL.3": 9, "FTA_SSL.4": 8, "FTA_TAB": 2, "FTA_TAB.1": 14, "FTA_SSL_EXT.1.1": 2}, "FTP": {"FTP_ITC": 14, "FTP_ITC.1": 61, "FTP_TRP": 45, "FTP_TRP.1": 11, "FTP_ITC.1.1": 3, "FTP_ITC.1.2": 1, "FTP_ITC.1.3": 2, "FTP_ITC.2": 6}}, "cc_claims": {"T": {"T.UNAUTHORIZED_ADMINISTRATOR_ACCESS": 2, "T.WEAK_CRYPTOGRAPHY": 2, "T.UNTRUSTED_COMMUNICATION_CHANNELS": 4, "T.WEAK_AUTHENTICATION_ENDPOINTS": 2, "T.UPDATE_COMPROMISE": 2, "T.UNDETECTED_ACTIVITY": 3, "T.SECURITY_FUNCTIONALITY_COMPROMISE": 2, "T.PASSWORD_CRACKING": 4, "T.SECURITY_FUNCTIONALITY_FAILURE": 2, "T.NETWORK_DISCLOSURE": 2, "T.NETWORK_MISUSE": 2, "T.MALICIOUS_TRAFFIC": 2}, "A": {"A.PHYSICAL_PROTECTION": 2, "A.LIMITED_FUNCTIONALITY": 2, "A.TRUSTED_ADMINISTRATOR": 2, "A.REGULAR_UPDATES": 2, "A.ADMIN_CREDENTIALS_SECURE": 2, "A.COMPONENTS_RUNNING": 2, "A.RESIDUAL_INFORMATION": 2}, "OE": {"OE.PHYSICAL": 3, "OE.NO_GENERAL_PURPOSE": 3, "OE.TRUSTED_ADMIN": 3, "OE.UPDATES": 3, "OE.ADMIN_CREDENTIALS_SECURE": 3, "OE.COMPONENTS_RUNNING": 3, "OE.RESIDUAL_INFORMATION": 3}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 21, "AES-": 3}}, "constructions": {"MAC": {"HMAC": 7, "HMAC-SHA-384": 3, "HMAC-SHA-512": 2, "HMAC-SHA-256": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDHE": 6, "ECDH": 5}, "ECDSA": {"ECDSA": 5}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 24, "DHE": 6, "DH": 20}, "DSA": {"DSA": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 4}, "SHA2": {"SHA-256": 4, "SHA-384": 3, "SHA-512": 4, "SHA256": 32, "SHA-2": 2}}}, "crypto_scheme": {"MAC": {"MAC": 39}, "AEAD": {"AEAD": 1}}, "crypto_protocol": {"SSH": {"SSH": 101}, "TLS": {"SSL": {"SSL": 12, "SSL 2.0": 4, "SSL 3.0": 4}, "TLS": {"TLS": 127, "TLS 1.2": 12, "TLS 1.1": 12, "TLS v1.2": 4, "TLS 1.0": 4, "TLS v1.0": 4}, "DTLS": {"DTLS": 161, "DTLS 1.2": 18, "DTLS 1.0": 18, "DTLS v1.2": 8, "DTLS v1.0": 8}}, "IKE": {"IKEv1": 25, "IKEv2": 25, "IKE": 10}, "IPsec": {"IPsec": 48}, "VPN": {"VPN": 1}}, "randomness": {"PRNG": {"DRBG": 3}, "RNG": {"RBG": 10}}, "cipher_mode": {"CBC": {"CBC": 3}, "CTR": {"CTR": 2}, "GCM": {"GCM": 3}}, "ecc_curve": {"NIST": {"P-256": 4, "P-384": 8, "P-521": 4, "curve P-384": 4, "secp256r1": 12, "secp384r1": 12, "secp521r1": 12}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_RSA_WITH_AES_128_CBC_SHA": 24, "TLS_RSA_WITH_AES_192_CBC_SHA": 8, "TLS_RSA_WITH_AES_256_CBC_SHA": 8, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 8, "TLS_DHE_RSA_WITH_AES_192_CBC_SHA": 8, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 8, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 8, "TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA": 8, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 8, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 8, "TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA": 8, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 8, "TLS_RSA_WITH_AES_128_CBC_SHA256": 8, "TLS_RSA_WITH_AES_192_CBC_SHA256": 8, "TLS_RSA_WITH_AES_128_GCM_SHA256": 8, "TLS_RSA_WITH_AES_192_GCM_SHA256": 8, "TLS_RSA_WITH_AES_256_GCM_SHA384": 8, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_192_CBC_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 8, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_192_GCM_SHA256": 8, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 8, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_192_GCM_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 8, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_192_CBC_SHA256": 8, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 8}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "technical_report_id": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS PUB 186-4": 5}, "NIST": {"NIST SP 800-56B": 1, "SP 800-56B": 1, "SP 800-131A": 1, "NIST SP 800-57": 4}, "PKCS": {"PKCS #1": 1}, "RFC": {"RFC 2986": 3, "RFC 3526": 1, "RFC 2460": 1, "RFC 5735": 1, "RFC 3513": 1, "RFC 793": 1, "RFC 5280": 21, "RFC 6960": 3, "RFC 5759": 3, "RFC 6347": 26, "RFC 4347": 18, "RFC 3268": 48, "RFC 4492": 48, "RFC 5246": 64, "RFC 5288": 24, "RFC 5289": 96, "RFC 6125": 16, "RFC 2818": 3, "RFC 4301": 4, "RFC 4303": 2, "RFC 3602": 4, "RFC 4106": 2, "RFC 4109": 2, "RFC 4304": 2, "RFC 4868": 6, "RFC 5996": 5, "RFC 5282": 2, "RFC 4945": 2, "RFC 2409": 1, "RFC 4253": 12, "RFC 5647": 8, "RFC 6668": 2, "RFC 4251": 2, "RFC 4346": 8}, "ISO": {"ISO/IEC 9796-2": 1, "ISO/IEC 14888-3": 1, "ISO/IEC 10118-": 1, "ISO/IEC 10118": 2, "ISO/IEC 18031:2011": 6}, "X509": {"X.509": 45}, "CC": {"CCMB-2012-09-001": 1, "CCMB-2012-09-002": 1, "CCMB-2012-09-003": 1, "CCMB-2012-09-004": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 6, "16 Figure 4: Distributed TOE use case with Management Component out of scope": 1, "16 Figure 4: Distributed TOE use case with Management Component out of scope.................................................16 Figure 5: Management Component required to": 1, "in Error! Reference source not found.. Figure 4: Distributed TOE use case with Management Component out of scope Stateful Traffic Filtering Firewall Component able to fulfill all cPP requirements Focus of": 1, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT.1.2 The TSF shall ensure that the SSH": 1, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHS_EXT.1.2 The TSF shall ensure that the SSH": 2, "indicated as \u201cREQUIRED\u201d but not listed in the later elements of this component are implemented is out of scope of the Evaluation Activity for this requirement. FCS_SSHC_EXT SSH Client Protocol 1 F I A _ X 5 0 9": 1}}}, "report_filename": "", "pp_filename": "CPP_FW_V2.0.pdf"}, "heuristics": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.Heuristics"}, "state": {"_type": "sec_certs.sample.protection_profile.ProtectionProfile.InternalState", "pp": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "56dd29e71ef95864467ef2f441bd45aa30451861a53f7cf0ddfe0f76ccc5f7ce", "txt_hash": "8da7a488b0a0bdd4f5f45cd40176055b7a5d718fb6cb146e590ded568eb9290d", "json_hash": null}, "report": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": false, "extract_ok": false, "source_hash": "6adef86c67e4bbbcbc8872bedf10c93c33839884a5cb1ca1d36f080444041ca7", "txt_hash": null, "json_hash": null}}, "scheme_metadata": {"source_scheme": "US", "pp_short_name": "CPP_FW_v2.0", "pp_sponsor_id": "", "pp_transition": "2018-06-06T00:00:00Z", "cc_version": "3.1", "predecessor": "CPP_FW_V1.0", "successor": "CPP_FW_V2.0E"}}