Common Criteria update

[Malcolm_Levy]

Great news, NIAP has awarded Check Point Software Technologies Ltd a new Common Criteria certification for Security Gateway and Maestro Hyperscale Appliances R81.00.

 https://www.niap-ccevs.org/Product/Compliant.cfm?PID=11235  

Compliance is claimed against 3 Protection Profiles

• collaborative Protection Profile for Network Devices Version 2.2e
• collaborative Protection Profile Module for Stateful Traffic Filter Firewalls v1.4 + Errata 20200625
• PP-Module for Virtual Private Network (VPN) Gateways Version1.1

The Validation identification reference Is VID11235 and the certificate is posted at:

• Product Compliant List: https://www.niap-ccevs.org/Product/Compliant.cfm?PID=11235
• Common Criteria Portal: https://commoncriteriaportal.org/products/  (pending)

I am also working to gain accreditation at:

• NSA CSfC (Commercial Solutions for Classified)
• NATO NIAPC (NATO Information Assurance Product Catalogue)

[Malcolm_Levy]

EAL4+ Update:

We are currently  certifying at EAL4+  Check Point R81.10 for Gateway and Maestro Configurations

[Malcolm_Levy]

Check Point was awarded EAL4+ for R81.10. 

Supporting appliances are listed in the Security Target and Validator report. Supporting appliances include Enterprise Gateways, Smart-1, Maestro and Maestro Hyperscale Orchestrator 

Full details in 

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

The listing can be seen here: https://www.tuv-nederland.nl/common-criteria/certificates.html

[Malcolm_Levy]

NSA CSFC: 

The listing was accepted for protecting classified data 

Check Point Software Technologies

Security Gateway and Maestro Hyperscale Appliances (3600, 3800, 6200, 6400, 6600, 6700, 6900, 7000, 16000, 16200, 16600, 26000, 28000, 239**, Smart-1 525, Smart-1 600-S, Smart-1 600-M, Smart-1 6000-L, Smart-1 6000-XL and ESXi 7.0 (HPE D360 G10)

R81.00

NIAP Validation Completed (at Gossamer)

[Malcolm_Levy]

The NATO NIAPC is no longer active. I was informed that funding for the NIAPC was terminated back in 2014. Since then the catalog was offered as a best effort service. The NIAPC is no longer available on the internet or any NATO network by the NCI Agency. The service is no longer offered as seen by the URL  that reports Service Unavailable  https://www.ia.nato.int/niapc/Information/NIAPC-vendor-info