ファイアウォール

「IT製品の調達におけるセキュリティ要件リスト」に掲載している 「国際標準に基づくセキュリティ要件」

表に示す認証取得製品リストは、以下の認証が対象となります。

• 日本の評価認証制度であるJISECでの認証製品(JISECのポータルサイトに掲載)
• CCRA加盟各国の認証製品(CCRAポータルサイトに掲載)
  • https://www.commoncriteriaportal.org/products/

国際標準に基づくセキュリティ要件[1]「U.S. Government Protection Profile for Traffic Filter Firewall In Basic Robustness Environments Version 1.1」に適合したISO/IEC15408(Common Criteria)認証取得製品

Check Point Software Blades R7x

WatchGuard XTM Firewalls and Fireware XTM Operating System v11.5.1

WatchGuard Technologies, Inc. XTM Firewalls and Fireware XTM Operating System v11.5.5

WatchGuard XTM Firewalls and Fireware XTM Operating System v11.6.5

Fortinet FortiGate™ Unified Threat Management Solutions and FortiOS 4.0™ CC Compliant Firmware

Fortinet FortiGate™ Unified Threat Management Solutions and FortiOS 4.0 MR3 CC Compliant Firmware

Fortinet FortiGate-VM Unified Threat Management Solutions and FortiOS 4.0 MR3 CC Compliant Firmware

Fortinet FortiGate™ Unified Threat Management Solutions and FortiOS 4.0™ MR3 CC Compliant Firmware (January 2014)

Cisco 800, 1900, 2900, 3900 Series Integrated Service Routers (ISR)

Fortinet FortiGate™-1240B Unified Threat Management Solutions and FortiOS 4.0 CC Compliant Firmware

Fortinet FortiGate™ Unified Threat Management Solutions and FortiOS 4.0 MR3 CC Compliant Firmware

Fortinet FortiGate™-200B and 620B Unified Threat Management Solution and FortiOS 4.0 CC Compliant Firmware

国際標準に基づくセキュリティ要件[2]「U.S. Government Approved Protection Profile - Protection Profile for Network Devices Version 1.1 及びU.S. Government Approved Protection Profile - Network Device Protection Profile (NDPP) Extended Package Stateful Traffic Filter Firewall Version 1.0」に適合したISO/IEC15408(Common Criteria)認証取得製品

ARUBA NETWORKS VIRTUAL MOBILITY CONTROLLER (HARDENED CHASSIS RUNNING VMWARE ESXI) WITH ARUBAOS 6.4.2.0 - 1.3 FIPS

CISCO ADAPTIVE SECURITY APPLIANCES (ASA) AND CISCO ADAPTIVE SECURITY APPLIANCES VIRTUAL (ASAV) Version: ASA 9.4(1.13), ASAv 9.4(1.240) ASDM 7.4 Components: ASA 5500 Series (5506-X, 5506-H, 5506-W, 5508-X, 5516-X) and ASAv running on VM ESXi 5.1 and 5.5 on the Unified Computing System (UCS) EN120E, EN120S M2, E140S M1, E140S M2, E140D M1, E160D M2, E160D M1, E180D M2, E140DP M1, E160DP M1, C22 M3, C24 M3, C220 M3, C220 M4, C240 M3, C240 M4, C260 M2, C420 M3, C460 M2, and C460 M4

Stonesoft Next Generation Firewall (NGFW)

Aruba Networks Mobility Controller v6.4.3.4-FIPS

Aruba Networks Mobility Controller Range & Software version 6.5.0.0

FortiGate™ UTM appliances running FortiOS™ 5.0 Patch Release 10

Check Point Software Technologies Ltd. Security Appliances R77.30

Cisco Adaptive Security Appliances (ASA) Firewall and Virtual Private Network (VPN) Platform, version 9.4(1)

Maintenance Report Supplementing Certificate Report 2015/93 Maintained TOE: Cisco Adaptive Security Appliances running ASA 9.4(1.13) with ASDM 7.6(1)

Juniper Networks, Inc. Junos 12.1 X46 D20 for SRX Series and LN Series Platforms

Juniper Networks, Inc. Junos 12.1 X46 D20 for SRX Series Platforms

Fortigate UTM appliances running FortiOS 5.0 Patch Release 10

Juniper Networks, Inc. JUNOS 12.1 X44 D15.5 for SRX Series Platforms Components: Software JUNOS US/Canada Version 12.1X44 JUNOS-FIPS Version 12.1 X44 Hardware SRX100, SRX110, SRX210, SRX220, SRX240, SRX550, SRX650, SRX1400, SRX3400, SRX3600; SRX5600 and SRX5800 with SPC-2-10-40; and SRX5600 and SRX5800 with SPC-4-15-320.

Cisco Adaptive Security Appliances Version: ASA software version 9.1(2) Components: ASA 5500 (5505, 5510, 5520, 5540, 5550, 5580-20-40), ASA 5500-X Series (5512-X, 5515-X, 5525-X, 5545-X, 5555-X), ASA 5585-X (5585-10, 5585-20, 5585-40, 5585-60), ASA Services Module (ASA-SM)

Maintenance Report Supplementing Certificate Report 2013/86

[3]：collaborative Protection Profile for Stateful Traffic Filter Firewalls(v1.0 (cPP_FW v1.0)以上)(ISO/IEC15408(Common Criteria)に基づいたセキュリティ要求仕様)

F5 BIG-IP 13.1.1 for LTM+AFM FWcPP

Fortinet FortiGate w/ FortiOS v5.6.7

F5 BIG-IP 12.1.3.4 for LTM+AFM (FWcPP v1.0)

SonicWall SonicOS Enhanced V6.2.5 VPN Gateway on NSA, SM, and TZ Appliances

Palo Alto Networks PA-200 Series, PA-500, PA-800 Series, PA-3000 Series, PA-5000 Series, PA-5200 Series, PA-7000 Series, and VM Series Next-Generation Firewall with PAN-OS v8.0.6

Palo Alto Networks PA-200 Series, PA-500, PA-800 Series, PA-3000 Series, PA-3200 Series, PA-5000 Series, PA-5200 Series, PA-7000 Series, VM Series, Next-Generation Firewall with PAN-OS v8.0.12 and v8.1.3

FortiGate SoC2 appliances running FortiOS 5.4

Forcepoint NGFW 6.3.1

FortiGate NGFW appliances running FortiOS 5.4

Cisco ASA and FXOS on Firepower 4100/9300

SonicWall SonicOS Enhanced V6.2.5 on NSA, SM, and TZ Appliances

Cisco Adaptive Security Appliances and ASA Virtual Version 9.6

CCRA：CCRA加盟国の認証取得製品は、表中の備考欄にCCRAと記述しています。

アーカイブ：表中の備考欄にアーカイブと記述されている製品は、各ポータルサイトにおいてアーカイブリストに移行された製品であることを示します。 アーカイブリストは、各国の認証機関の判断により、認証取得後一定期間経過した製品を掲載するリストです。日本の場合は、認証取得から5年経過した製品、および、供給者による販売が終了した製品が掲載されます。

• JISECのアーカイブリスト
• CCRAのアーカイブリスト
  • https://www.commoncriteriaportal.org/products/index.cfm?archived=1

アーカイブされた製品の調達に際しては、製品購入の可否等について各製品販売元へ確認をお願いします。