Actu
gateProtect Starts Common Criteria EAL 4+ Certification Process
November 2011 by Emmanuelle Lamandé
gateProtect recently started undergoing tests at Germany’s Federal Office for Information Security that will lead to Common Criteria certification. The company’s solutions are being verified in accordance with international standards so that customers and partners can be confident that its products meet the most stringent data protection requirements. The focus of the certification process is on the security rules in gateProtect’s upcoming Version 10, which are being tested for compliance with the Common Criteria Evaluation Assurance Level 4 Augmented (EAL 4+).
The Common Criteria for Information Technology Security Evaluation are a set of internationally-recognized guidelines that define the technical basis for evaluating the security levels of IT solutions. These guidelines were developed by security experts to assess which solutions are suitable for use in sensitive and non-sensitive data environments.
The highest internationally-recognized protection level within this standard is the “Evaluation Assurance Level 4 Augmented” (EAL4+), which is being used to certify the security rules of the gateProtect firewall and its core component, the packet filter. This filter, which manages the firewall rules, is included in the new Version 10 to be released next year. Full support for IPv6 will be included to respond to one of the most important requirements for the future. Also, all the other UTM and next-generation firewall functions work closely with the security rules component. This was the reason gateProtect decided to have this central component certified. The certification will examine the company’s development and organizational processes, as well as the functionality and security of the rules, in accordance with the most stringent data protection requirements.
