BSI Common Criteria EAL4+ R82 Version + Jumbo Hotfix

[HeikoAnkenbrand]

Check Point has successfully gained a Common Criteria EAL4+ AVA_VAN.4 certification for R82 Security Management, Security Gateway, and Maestro Orchestrator.

The certification was performed under the authority of the German certification scheme. The Certificate, Certification Report, and Security Target are available below, and are officially published on the BSI web site and the Common Criteria Portal (at the top, click "Certified Products" > in the "Filter by" section, in the leftmost vendor field, select "Check Point Software Technologies Ltd.").

Important Limitations:
To obtain the evaluated configuration, the administrator is required to configure the TOE according to instructions provided in the Installation and Configuration Guide. After completion, non-TOE functionality will be disabled. This configuration does not support standard jumbo hotfixes. Flaw remediation will be provided through Customer Support via opening a support request.

Questions:
- Is it possible to install a jumbo hotfix for the BSI version from SK181211, for example JHF Take 19. 
   Even if we would lose the certification here - in an emergency case.
- Will Check Point provide jumbo hotfixes in the future without opening a support request every time.

[Malcolm_Levy · Accepted solution]

A regular JHF on the evaluated configuration is not supported. 

We certified a side branch on top of the R82 general release where we implemented code for meeting BSI specific requirements.

We do not support JHFs on the certified release as they are not necessarily compatible and may overwrite code written for BSI compliance. 

The certified code is supported, and normal support channels should be used. 

In the very rare circumstance where a CVE that impacts Check Point is found I expect a HF to be provided.