Allowed-with list version

1.4r12

Date

02 March 2026

This document contains the lists of allowed packages and PP-Modules to which exact conformance can be claimed in conjunction with the above PP-Module. It is used in conjunction with the ‘CC Conformance’ section of the PP-Module to provide the complete conformance statement for the PP-Module.

Inclusion of an object on one of these lists does not imply endorsement of the object by the NDFW iTC, nor does it imply that the relevant object has been checked for compliance with the assurance requirements applicable to a PP-Configuration or ST that uses the PP-Module in conjunction with the relevant object.

Use of the PP-Module for Stateful Traffic Filter Firewalls in conjunction with objects (Protection Profiles, PP-Modules, packages) other than its base PP and the allowed objects below is not allowed.

FW Module v1.4e

PP-Module to which this list applies :

PP-Module for Stateful Traffic Filter Firewalls

Latest definitive PP-Module version:

V1.4 +Errata 20200625, 25 June 2020

Supporting Document for PP Module:

Evaluation Activities for Stateful Traffic Filter Firewalls PP Module

Latest definitive SD version:

V1.4 +Errata 20200625, 25 June 2020

Base PP:

collaborative Protection Profile for Network Devices

Latest definitive base PP version:

V2.2e, 27 March 2020

Supporting Document for base PP:

Evaluation Activities for Network Device cPP

Latest definitive SD version for base PP:

V2.2, 4 December 2019

Allowed Packages: No objects of this type are currently allowed with the PP-Module.

Allowed PP-Modules:

1.

Object ID:

PP-Module for Voice/Video over IP (VVoIP) Endpoints

Object version:

1.0 (28 October 2020)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

2.

Object ID:

PP-Module for Wireless Intrusion Detection/Prevention Systems (WIDS/WIPS)

Object version:

1.0 (30 September 2020)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

3.

Object ID:

PP-Module for Enterprise Session Controller (ESC)

Object version:

1.0 (19 November 2020)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

4.

Object ID:

PP-Module for Intrusion Prevention Systems (IPS)

Object version:

1.0 (11 May 2021)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

5.

Object ID:

PP-Module for Virtual Private Network (VPN) Gateways

Object version:

1.2 (31 March 2022)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

6.

Object ID:

PP-Module for MACsec Ethernet Encryption

Object version:

1.0 (16 December 2023)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

7.

Object ID:

PP-Module for Virtual Private Network (VPN) Gateways

Object version:

1.3 (10 August 2023)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

8.

Object ID:

PP-Module for Wireless Local Area Network (WLAN) Access System Version

Object version:

1.0 (31 March 2022)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None