Allowed-with list version

2.0

Date

30 March 2026

This document contains the lists of allowed packages and PP-Modules to which exact conformance can be claimed in conjunction with the above PP-Module. It is used in conjunction with the 'CC Conformance' section of the PP-Module to provide the complete conformance statement for the PP-Module.

Inclusion of an object on one of these lists does not imply endorsement of the object by the ND-iTC, nor does it imply that the relevant object has been checked for compliance with the assurance requirements applicable to a PP-Configuration or ST that uses the PP-Module in conjunction with the relevant object.

Use of the PP-Module for Stateful Traffic Filter Firewalls in conjunction with objects (Protection Profiles, PP-Modules, packages) other than its base PP and the allowed objects below is not allowed.

FW Module 2.0

PP-Module to which this list applies :

PP-Module for Stateful Traffic Filter Firewalls

Latest definitive PP-Module version:

V2.0, 30-March-2026

Supporting Document for PP Module:

Evaluation Activities for Stateful Traffic Filter Firewalls PP Module

Latest definitive SD version:

V2.0, 30-March-2026

Base PP:

collaborative Protection Profile for Network Devices

Latest definitive base PP version:

V4.0, 25 November 2025

Supporting Document for base PP:

Evaluation Activities for Network Device cPP

Latest definitive SD version for base PP:

V4.0, 25 November 2025

Allowed Packages:

No objects of this type are currently allowed with the PP-Module.

Allowed PP-Modules:

TBD

FW Module v1.4e

PP-Module to which this list applies :

PP-Module for Stateful Traffic Filter Firewalls

Latest definitive PP-Module version:

V1.4 +Errata 20200625, 25 June 2020

Supporting Document for PP Module:

Evaluation Activities for Stateful Traffic Filter Firewalls PP Module

Latest definitive SD version:

V1.4 +Errata 20200625, 25 June 2020

Base PP:

collaborative Protection Profile for Network Devices

Latest definitive base PP version:

V3.0e, 6 December 2023

Supporting Document for base PP:

Evaluation Activities for Network Device cPP

Latest definitive SD version for base PP:

V3.0e, 6 December 2023

Allowed Packages: No objects of this type are currently allowed with the PP-Module.

Allowed PP-Modules:

1.

Object ID:

PP-Module for Voice/Video over IP (VVoIP) Endpoints

Object version:

1.0 (28 October 2020)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

2.

Object ID:

PP-Module for Wireless Intrusion Detection/Prevention Systems (WIDS/WIPS)

Object version:

1.0 (30 September 2020)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

3.

Object ID:

PP-Module for Enterprise Session Controller (ESC)

Object version:

1.0 (19 November 2020)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

4.

Object ID:

PP-Module for Intrusion Prevention Systems (IPS)

Object version:

1.0 (11 May 2021)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

5.

Object ID:

PP-Module for Virtual Private Network (VPN) Gateways

Object version:

1.2 (31 March 2022)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

6.

Object ID:

PP-Module for MACsec Ethernet Encryption

Object version:

1.0 (16 December 2023)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

7.

Object ID:

PP-Module for Virtual Private Network (VPN) Gateways

Object version:

1.3 (10 August 2023)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None

8.

Object ID:

PP-Module for Wireless Local Area Network (WLAN) Access System Version

Object version:

1.0 (31 March 2022)

Owner:

NIAP (niap@niap-ccevs.org)

Notes:

None