This process, along with inclusion on the CSfC Components List, allows organizations to be certain that the commercial parts they are using will provide enough security to safeguard the classified information. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. ) pertinent to the product. Justification for other than full and open competition (OTFAOC) in support of DMCC Mobility ProgramHow to securely access classified information on mobile devices? This pdf document provides the latest guidance and best practices for implementing the Mobile Access Capability Package, a solution approved by the NSA's Commercial Solutions for Classified (CSfC) program. CSfC selections for Extended Package for Authentication Server Version 1. Commercial Solutions for Classified Program Newsletter. National Security Agency (NSA) cybersecurity strategy to quickly deliver secure solutions that leverage commercial technologies. See moreComponents List. We have recently seen an increase in the number of clients who are asking about the National Security Agency’s (NSA) Commercial Solutions for Classified (CSfC) program and how to get on the CSfC Components List maintained by the NSA Information Assurance Directorate (IAD). The current number of technology categories on the CSfC component list index Source: National Security Agency Central Security Service By tapping the extensive CSfC product list, the Fort Gordon team was able to significantly enhance the Army’s remote work capability in response to COVID-19. 1. DAR Solution Sources SoughtCommercial Solutions for Classified (CSfC) is a series of capability packages designed by the National Security Agency (NSA) to provide the capability to access classified information without. This military phone is ready for on-premises or hosted deployment and management. Following the specifications and using the information in a CP, customers/integrators make product selections to create an architecture with specific commercial products configured in a particular manner. 2. A Complete CSfC Layer All DIGISTOR FIPS SEDs—including Citadel K Series SEDs—are listed on the NSA CSfC Component List for hardware full drive encryption, which allows DoD, Federal agencies, and critical infrastructure to protect mission critical and classified data using commercial solutions. Thanks to CSfC, system designers can now deploy a commercial off-the-shelf (COTS) solution with. Following the specifications and using the information in a CP, customers/integrators make product selections to create an architecture with specific commercial products configured in a particular manner. BSI (Germany) BSI VS-NfD CERTIFICATION. Agencies that use CSfC products will have “situational awareness about which components are used and where,” and there is documented incident handling procedures. 1. We have experience with testing most components on the CSfC Components List thanks to our MC3 Lab and are uniquely positioned to offer non-biased architecture and engineering support to ensure your priorities are addressed in the resulting solutions. Version 2. from the list of PE products on the CSfC Components List under the Mobile Platform section. Bivio is a developer of innovative, high-performance network security platforms for. Open source components may be listed, provided they have a responsible sponsor, and an. What does CSFC abbreviation stand for? List of 31 best CSFC meaning forms based on popularity. 1. Home; News; Intuition . It also includes key. 11 encryption deprecating WPA2 in this document Added Campus WLAN Tactical Appendix leveraging the CSfC process to build and test in accordance with the approved CP and selecting components from the CSfC Components List. government protection profile. The products, or components, used to build the CSfC solutions must be selected off the CSfC Components List. Note 2: The following selections apply to CSfC TLS software application functionality. CryptoThe CSfC program enables a variety of use cases, but most important is the ability to use commercial wireless mobile devices for classified communications — as well as the ability to use commercial encryption devices for site-to-site transmission of classified information – without the use of Type 1 cryptographic equipment. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. Book Now. The products, or components, which are used in the Capability Packages and, ultimately, to build CSfC solutions, must be selected off the NSA CSfC Components List, and can be used to build a layered solution containing multiple components. Aruba, a Hewlett Packard Enterprise Company. 17 Customers and their Integrators are advised that modifying a NIAP-validated component in 18 a CSfC solution may invalidate its certification and require a revalidation process. S. SS_DAR_Solution_Amended. The DTS1 has also been certified through Common Criteria and NATO as well. Notes Note 1: The following selections apply to CSfC TLS protected server functionality. DIGISTOR is listed in the Hardware Full Disk Encryption section on the CSfC Component List with the Common Criteria/NIAP validation report number CCEVS-VR-VID11297-2023 . PF GA, LF T=O DAR-PS-7 The products used for the HWFDE layer must be chosen from the list of HWFDEs on the CSfC Components List. An official website of the United States government Here's how you know Official websites use . 1 Version 2. JIW-13-2--23-April-2014--Final-Version--turfsurf3. NSA provides a list of components to its customers to satisfy architectures and configuration information contained in its Capability. This is the first time a mobile device based on a holistic solution from Cog Systems that includes bare-metal virtualization has sought NIAP Certification, setting a. e. If you need assistance obtaining vendor ). Commercial Solutions for Classified - How is Commercial Solutions for Classified abbreviated?. The following changes will be made to the overall CSfC program. It. Customers must ensure the components selected will permit the necessary functionality for the selected architecture. CSfC Components List provide the necessary functionality for the selected capabilities. Secure data-at-rest (DAR) storage provider Digistor announced that the National Security Agency (NSA) added its FIPS 140-2 L2 SSDs to the Commercial Solutions for Classified (CSfC) list, the only commercial drives to achieve this listing. This helps answer the question:NIAP End of Year Report – 2020 Common Criteria Evaluation and Validation Scheme 2020 Report Through the unprecedented times COVID-19 presented in 2020, NIAP continued to make a difference“CSfC protects classified data through multiple encryptions, firewalls and network layers to ensure point-to-point protection. Learn more To learn more about CSfC and why it is important to private and public sector organizations, watch this short video from Barry Lake Chief of NSA Cyber-Security. If getting started daunts you, NSA also provides a list of Trusted Integrators. The National Security Agency (NSA) provides guidelines for multi-site connectivity using Commercial Solutions for Classified (CSfC) components in this capability package. It provides guidance on. Oceus is an NSA Commercial Solutions for Classified (CSfC) trusted integrator, providing CSfC support for over six years. technologies that are deemed eligible as CSfC components of a composed, layered IA solution. Additional resources • CSfC Components List • NIAP product compliant list To find a product that has met the right criteria, you can view the CSfC components list (to ensure that component parts are NIAP-approved) and check with a manufacturer directly to learn if the product you wish to obtain is an approved CSfC product . Engineering Director. the CSfC Components list. • Component selection from the approved CSfC Components List, ensuring components have satisfied specific requirements to include successful evaluation by a Common Criteria Testing Lab and compliance with the applicable public standards and protocols as specified in the PPs and CSfC CPsCSfC Components List. Cellcrypt Achieves Approval for Use to Protect Classified US National Security Systems Data. Posted Date 9/5/18 Size 34KB Federal Agency AFLCMC Hanscom AFB Source Federal Contract Opportunity AWACS Commercial Solutions for Classified Similar To Source Opportunity . Samsung Knox was designed to help overcome these two challenges by making Samsung Galaxy smartphones the most secure and manageable on the market. Archon Secure LLC. Amendment 001. A Horizon-based instance of Trusted Thin Client Remote contains COTS components validated by the CSfC program to be used in layered solutions to protect classified data within national security systems. The document explains how to securely connect multiple sites over public networks using NSA-approved products and configurations. 0 3. Arista Networks, Inc. The EDITH module of the EUD encapsulates the data. 9. National Security Systems are defined as. do. This secured data is encrypted by NSA-approved. It communicates the status, types of updates, types of changes, etc. The list ensures components have satisfied specific requirements and evaluation by a Common Criteria. Secure . The DIGISTOR SSDs used as the basis for Citadel C Series SSDs are already on both the NIAP Product Compliant List and the NSA’s CSfC Components List. may not be evaluated, but CSfC requires supported and documented functionality for the SFRs (i. The CSfC Data-at-Rest (DAR) CP has evolved over the last six years. CSfC canisters represent key technology areas used in commercial solutions (i. In the U. Charter School Facility Committee. may not be evaluated, but CSfC requires supported and documented functionality for the SFRs (i. Additionally, the CSfC Program defines “Capability Packages,” which provide guidance on solution architecture to meet a specific security need, such as a secure VPN to tunnel. 1. Colorado Springs Fellowship Church. Modified Table 9 to change the Objective requirement for AES-256-GCMP to AES-256-CCMP; removed inaccurate RFC references. e. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. Commercial Solutions for Classified Program (CSfC) components list. CSfC is an NSA strategy to provide cybersecurity solutions by taking advantage of commercially available industry solutions. 509 and IETF PKIX, OCSP, TLS, and S/MIMEas a VPN client, and listed on the CSfC Components List. Deploying a WIDS/WIPS within a CSfC solution requires that the WIDS/WIPS be selected from the CSfC Components List and must be configured to use the National Information Assurance Partnership (NIAP) -. The document covers the design, configuration, and operation of CSFC key management components and services. Fortinet® (NASDAQ:FTNT), the global leader in high-performance cybersecurity solutions, today announced that its FortiGate Enterprise Firewall has been added to the Commercial Solutions for Classified Programs (CSfC) approved Components List. com The Curtiss-Wright DTS1 is the embedded industry’s first COTS DAR device with two layers of certifiedThe use of data en cryption solutions approved for placement on the CSfC Components List enables system de velopers to significantly speed their application development and deployment. Inner Encryption Component must function using Tunnel Requirement. Improved classified network access to authorized personnel • Enables mobility through high-performance, classified-capable wireless lans (wlans). Oceus has had a. The National Security Agency’s (NSA’s) Commercial Solutions for Classified (CSfC) program enables integrators to leverage two distinct CSfC-approved commercial. Leveraging DTECH Products in a VPN CSfC SolutionAdditionally, EJBCA Enterprise version 7. Products listed on the CSfC Components List are not guaranteed to be interoperable with all other products on the CSfC Components List. Please provide comments on usability, applicability, and/or shortcomings to the CSfC Program (csfc@nsa. QuestionsResponseFormat. 1 HSM firmware update. We are delighted to share some of our whitepapers with you! Simply click a whitepaper you’d like to view, complete the form, and the whitepaper will download. , the pioneer &. Once the PBA is on the NIAP Product Compliant List, it will be eligible to be listed on the NSA CSfC Components List. Selecting an. MFS U/00/814670-15 Commercial National Security Algorithm (CNSA) Suite Rapid and secure information sharing is important to protect our Nation, its citizens and its interests. Having received Common Criteria (CC) certification, the hardware and software FDE layers used in the DTS1 are currently listed on the United States NIAP Product Compliant List, NSA’s CSfC Components List, and the International Common Criteria Certified Products List, and the NATO Information Assurance Product Catalogue (NIAPC). USGv6 compliance provides conformance with the. The Samsung Galaxy S23 Tactical Edition and Samsung Galaxy XCover 6 Pro Tactical Edition support dual. This process, along with inclusion on the CSfC Components List, allows organizations to be certain that the commercial parts they are using will provide enough security to safeguard the classified information. Explore List. provided the network device is on the CSfC components list to serve both functions. c. If needed, functionality and/or configurations outside the scope of a CSfC IPsec VPN Gateway that conflict with the publishing the products on CSfC Components List after the vendor agrees to the terms in the MOA. 2 Meet Stringent Federal Standards; Approved for Commercial Solutions for Classified (CSfC) Components List. 2. Threat- or hazard-specific risk analysis. Rate it: CSFC. The CSfC component list enables system integrators to identify products that are in evaluation, or are already certified, that can be used in a data protection solution. Commercial Solutions for Classified Program Newsletter. 0 evaluations: At this time, the CSfC Program does not require any selectable requirements for Authentication Servers. Capability Package and Annex (CP/Annex) Versioning Scheme Commercial component developers (i. CHICAGO, May 1, 2017 /PRNewswire/ — Cog Systems’ D4 Secure Platform™ is now officially eligible on a mobile device by the NSA’s Commercial Solutions for Classified (CSfC) program. When building a CSfC solution for data at rest, use the Capability Package to determine the requirements for each component, reference the sample solution designs, and then find a provider on the CSfC Components List from which to source each required component. Trusted Integrators support the client in the implementation of CSfC CPs. , vendors) who wish to have their products listed as CSfC approved components must build their products in accordance with the applicable. Additional resources • CSfC Components List • NIAP product compliant listCertified to meet the most stringent requirements including NSA’s CSfC Component’s List, NIAP Common Criteria/MDFPP, DODIN APL, FIPS 140-2, DISA Android 10 STIG, IP68 rating. to stakeholders by using a defined and documented naming convention. Page 1 of 1. S. 1 HSM firmware update. When a product is added to the list, it does not equate to NSA approval or endorsement of the product. The CSfC Program maintains the CSfC Components List, which lists the commercial security products that have met the required IT security evaluation criteria. Section 2- Registration Submission - The customer provides a complete Solution. After completion of the CC evaluation, and any required CSfC testing (as required by MOA), the status will change to indicate completion of NIAP. The C Series built-in PBA unlocks access to the encrypted operating system on the Citadel SSD, as well as its stored data. 2 of 78In accordance with CNSS Policy 7, only approved products on the CSfC Components List can be used in commercial cybersecurity solutions protecting classified NSS data. 11. FortiGate Firewalls Running FortiOS 5. 1P7 NSA CSfC Component List; 9. CSfC Component List Curtiss-Wri ght Starts ere Y t ar e Purchase Certified COTS Product Figure 2: Shorten encryption development time with approved COTS solutions Net-Centric Architecture Modern unmanned vehicles, ISR aircraft, and mobile ground vehicles are built around a network-centric architecture. 1P7 NSA CSfC Component List; 9. 4. CSfC Components List will provide the necessary functionality for the selected capabilities. CSfC Selections for VPN Clients VPN Client products used in CSfC solutions shall be validated by NIAP/CCVES or CCRA partnering schemes as complying with the current requirements of NIAP’s Protection Profile (PP) Module for VPN Client and one of the Base Protection Profiles as specified therein (i. It’s worth noting that this is a “products list” that is separate. Product will not be added to the Components List until the NIAP evaluation is in process. Validated products can be found on NIAP’s CCEVS. They contain the approved commercial components that are eligible for use in a CSfC solution. Customers and their Integrators are advised that modifying a NIAP-validated component in a CSfC solution may invalidate its certification and require a revalidation process. Cellcrypt’s products are now eligible to be used within Commercial Solutions for Classified (CSfC) solutions for protecting classified US National Security Systems (NSS) data WASHINGTON–(BUSINESS WIRE)–Cellcrypt Inc. S. 91. The NIAP (National Information Assurance Partnership) defines Protection Profiles with certification requirements. requirements for component configuration, solution testing, monitoring, and the use and administration of a CSfC solution. More information can be found at herein are embodiments of systems, methods, and products comprising a computing device, which provides Efficient Data-In-Transit Protection Techniques for Handheld Devices (EDITH) to protect data-in-transit. 16 While CSfC encourages industry innovation, trustworthiness of the components is paramount. The Commercial Solutions for Classified (CSfC) Program enables commercial products to be used in layered solutions protecting classified NSS data. The Core includes five high level functions: Identify, Protect, Detect,. Customers must ensure that the products selected will provide the necessary security functionality for their architecture. Samsung Galaxy smartphone, tablet devices with Samsung Knox and Secusmart’s SecuSUITE solution . After selecting the appropriate CP (s), the customer discusses solution basis and fundamentals with the CSfC PMO. CPs specify which components of the solution must01 May, 2017, 09:02 ET. 1. 1. As the CSfC program continues to evolve and mature, you can expect that the benefits of CSfC will only continue to increase. Partnership (NIAP) approved and listed on the Commercial Solutions for Classified (CSfC) Components List. Vendor/NSA: MOA developed. To successfully implement a solution based on this CP, all Threshold Requirements, or the corresponding in transit. CSfC customers using products from the Archived Components List must transition to products on the CSfC Components List within two years of the "date removed. • Product Compliant List (PCL) • Product Inquiries • U. Bits & Bytes Volume I Issue I. In addition, the email client is supported by a secure file viewer that allows the user the ability for viewing, creating, editing and storing documents on a DMCC-S device within the protected DAR email client file encryption container. The products, or components, used to build CSfC solutions must be selected off the CSfC Components List. These DIGISTOR drives are the only commercial SSDs to achieve this listing and the company's Citadel™ K. In addition, the email client is supported by a secure file viewer that supports Microsoft Exchange ActiveSync protocol that allows the user the ability for viewing, creating, editing and storing documents securely on a DMCC-S. S. Connectors Counter-UAS ISR Payloads Power Electronics Rugged Computing Sensors Test. Approved COTS devices will be used for the client’s Campus A wireless local area network (WLAN) solution which, when properly configured, will achieve a level of assurance sufficient for protecting classified data while in transit. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. Cesarean Section for Fetal. For National Security Systems (NSS) where classified data is being protected at rest or in transit by commercial products, technologies from the Commercial Solutions for Classified (CSfC) Components List shall be used, in accordance with NSA's published CSfC Capability Packages. Additional components will be added to the CSfC Components List to allow 66 for this new change. To successfully implement a solution based on this CP, all Threshold Requirements, or the corresponding Objective Requirements applicable to the selected capabilities, must be implemented, as described inThis Commercial Solutions for Classified (CSfC) Capability Package (CP) describes how to protect classified data (including Voice and Video) in Mobile Access Solutions transiting Wired Networks, Domestic Cellular Networks, and Wireless Networks to include Government Private Cellular Networks and Government Private Wi-Fi networks. The document covers the design, configuration, and operation of CSFC key management components and services. None Listed. Looking for abbreviations of CSFC? It is Commercial Solutions for Classified. Each of the layers (HWFDE and SWFDE) in the Curtiss-Wright Data Transport System (DTS1) COTS network attached storage (NAS) device appear on the CSfC Components List. CSfC selections for FDE AA cPP evaluations: FCS_KYC_EXT. 2 Known Bugs, Limitations, and Workarounds1. The DTS1 can securely store up to. NIAP End of Year Report – 2020 Common Criteria Evaluation and Validation Scheme 2020 Report Through the unprecedented times COVID-19 presented in 2020, NIAP continued to make a differenceDIGISTOR ®, a leading provider of secure Data at Rest (DAR) storage solutions, announced that the National Security Administration (NSA) added its FIPS 140-2 L2 SSDs to the Commercial Solutions for Classified (CSfC) list. d a ta s h ee t w w w m rc y co m acquire acquireacquire 100101010 001101011 110101100 digitize acquireacquire 100101010 001101011 110101100 digitize 100101010 001101011…UPDATE 2023-06-02: SecretAgent and SecretAgent/TE have been updated. The CSfC Component List is growing and changing constantly, and building a. Building on the commercial success of Mercury’s TRRUST-Stor®with the Commercial Solutions for Classified (CSfC) program’s hardware full disk encryption (HWFDE) standards. S. 309. This guide is built to help individuals looking to build a Commercial Solutions for Classified (CSfC) approved solution. The program is founded on the principle that properly configured, layered solutions can provide adequate protection of classified data in a variety of different applications. CSfC Components List: List of products D/As can choose from for use in approved CSfC solutions. The Key Management Requirements Annex provides guidance on how to implement commercial solutions for classified (CSFC) key management systems that meet NSA standards. do. Click the banner below to learn about the benefits of hybrid cloud environments. Register by March 26 to save $130 off the Regular Fee ($420). 5 The CSfC Program maintains the CSfC Components List, which lists the commercial security products that have met the required IT security evaluation criteria. CSfC Capability Packages and the CSfC Components List can be found by visiting the NSA CSfC Components List page. Cellcrypt’s products are now eligible to be used within Commercial Solutions for Classified ( CSfC) solutions for protecting classified. What is the CSfC component list? This list enables system integrators to identify products that are in evaluation or are already certified products that can be used. These compo-nents have been certified by NSA’s rigorous National. 1. ATEN International Co. Customers and/or solution integrators will draw products from the published list of eligible CSfC components to create composed solutions for a particular operational capability. CSfC or commercial solutions for classified capability products are encrypted commercial tools that allow enterprises to connect to secure networks. Title: Scanned Document• Product Compliant List (PCL) • Product Inquiries • U. Once you have defined your goals and selected the proper capability package to use in building your architecture, it's time to find the components you need to execute. Additional component will be added to the CSfC Components List to allow for this new change. NIAP remained supportive of the Protection Profiles (PPs) methodology and found significant value in collaboratively applying resources to develop sound PPs as opposed to analyzing the product after the fact. S. components and the latest Agile development processes to quickly deliver scalable solutions for the classified. gov websites use HTTPS. For National Security Systems (NSS) where classified data is being protected at rest or in transit by commercial products, technologies from the Commercial Solutions for Classified (CSfC) Components List shall be used, in accordance with NSA's published CSfC Capability Packages. Cancellation Policy: All fees will be refunded for cancellations received in writing by April 15, 2024. The document explains how to securely connect multiple sites over public networks using NSA-approved products and configurations. 4) addresses potential data loss issues with Microsoft Windows 10, KB5025221, and Windows 11…NIAP End of Year Report – 2020 Common Criteria Evaluation and Validation Scheme 2020 Report Through the unprecedented times COVID-19 presented in 2020, NIAP continued to make a difference• Product Compliant List (PCL) • Product Inquiries • U. 1. Responses to Vendor Questions for amendment 0002. Established by the National Security Agency and Central Security Service (NSA/CSS), CSfC enables commercial products to be used in layered solutions protecting classified National Security Systems (NSS) data. CSfC Components List. • Product Compliant List (PCL) • Product Inquiries • U. The updated TE File System Device Drivers (version 1. Note 2: The following selections apply to CSfC TLS Software Application functionality. 6. 9. 0In 2019, NIAP contacted more than 70 vendors with products listed on the Product Compliant List (PCL) in response to release of new vulnerabilities. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. More specifically, NSA defines a Type 1 product as “cryptographic equipment, assembly or component classified or certified by NSA for encrypting and decrypting classified and sensitive national security information when appropriately keyed. Responses_to_vendor_questions__Amend_0002. customers to select COTS products from the CSfC Components List for their Campus WLAN solution and then to properly configure those products to achieve a level of assurance sufficient for protecting classified data while. Modified Table 9 to change the Objective requirement for AES-256-GCMP to AES-256-CCMP; removed inaccurate RFC references. • avoids the time and expense of physical-hardenedThe TACLANE-C175N CHVP encryptor is a small form factor HAIPE device with 100 Mb/s full-duplex (200 Mb/s aggregate) throughput. Products included on the Archived Components List are no longer approved for use in new CSfC solution registrations. 9. home / stock / cub / cub news. G1 microServerNIAP End of Year Report – 2021 Common Criteria Evaluation and Validation Scheme 2021 Report In spite of the challenges that COVID-19 presented this year, NIAP continued to focus on the increase of1. Commercial Solutions for Classified (CSfC) is an important part of NSA's commercial cybersecurity strategy to deliver secure cybersecurity solutions leveraging commercial technologies and products. S. Do you want to download the latest version of the Wireless Local Area Network (WLAN) Capability Package (CP) from the National Security Agency (NSA)? This document provides guidance on how to configure and deploy secure WLAN solutions using Commercial Solutions for Classified (CSFC) components. 1. National Security Agency (NSA) cybersecurity strategy to quickly deliver secure solutions that leverage commercial technologies. NSA provides a list of components to its customers to satisfy architectures and configuration information contained in its Capability. • Product Compliant List (PCL) • Product Inquiries • U. EJBCA Ente rprise is Common Criteria certified in compliance with the National Information Assurance Partnership (NIAP) approved Protection Profile for Certification Authorities VTOE components and trusted IT entities, identification and authentication of administrators, auditing of security-relevant events, ability to verify the source and integrity of updates to the TOE, the implementationThe National Security Agency (NSA) and CISA have released the cybersecurity information sheet Selecting and Hardening Standards-based Remote Access VPN Solutions to address the potential security risks associated with using Virtual Private Networks (VPNs). Customer Initiation -The first step in a solution registration is to review the associated CPs to determine which meets their needs. 0: NIAP 2022-02-10 Operating System: Protection Profile for General Purpose Operating Systems Version 4. customers to select COTS products from the CSfC Components List to develop a WIDS/WIPS solution and then properly configure those products to achieve a level of assurance sufficient for a solution used to protect classified Data-in-Transit (DIT). • Product Compliant List (PCL) • Product Inquiries • U. For a component to be added to the CSfC components list, it’s necessary to undertake a certification effort, similar to Type-1 solutions. S. Archon Secure CSfC Certification View Archon Secure’s listing on the CSfC Approved Components List under IPsec VPN Gateway, as well as the full protection profile and security target information for. TI T=O MA -PS -11 If the solution is using a SIP Server, it must be chosen from the list of SIP Servers on the CSfC Components List. December 9, 2022 at 1:13 PM · 2 min read. Commercial Solutions for Classified Program Components List. DIGISTOR is listed in the Hardware Full Disk Encryption section on the CSfC Component List with the Common Criteria/NIAP validation report number CCEVS-VR-VID11297-2023 . For more information about the CSfC program, established by the National Security Agency (NSA), refer to NSA's information at. Being validated against the Common Criteria Protection Profiles. NSA provides a list of components to its customers to satisfy architectures and configuration information contained in its Capability Packages. The next gen product is the DTS1+. VIA with Suite B is enabled with the ArubaOS ACR module and supported on Windows, Mac OS, Linux, Apple iOS, and Android. What will you find in this guide? This guide is built to help individuals looking to build a Commercial Solutions for Classified (CSfC) approved solution. , vendors) who wish to have their products listed as CSfC approved components must build their products in accordance with the applicable U. The Commercial Solutions for Classified Program is a key component of the U. Vendors who wish to have their products eligible as CSfC components of a composed, layered Information Assurance (IA) solution must build their products in accordance with the applicable NIAP-approved. TI T=O MA -PS -11 If the solution is using a SIP Server, it must be chosen from the list of SIP Servers on the CSfC Components List. What is Commercial Solutions for Classified (CSfC)? The National Security Agency (NSA) Commercial Solutions for Classified (CSfC) Program enables commercial products to be used in layered solutions leveraging industry innovation in order to protect classified National Security Systems (NSS) data. gov. pdf - 841913833-Hubzone. CSfC is an NSA strategy to provide cybersecurity solutions by taking advantage of commercially available industry solutions. Department of Defense (DoD), United. The CSfC components list can be viewed here:. gov . By implementing CSfC, U. Adder Technology Ltd. 0 3. Additional components will be added to the CSfC Components List to allow 66 for this new change. demonstrate equivalent functionality as noted above) as part of CSfC Components List product eligibility. SonicWall Firewalls are CSfC certified. All listed components must have both Common Criteria Certification and FIPS validation for the product to be listed on the component list. The Core consists of three parts: Functions, Categories, and Subcategories. 0. Cornwall Sea Fisheries Committee (UK) CSFC. NetApp ONTAP data management software is the first enterprise-class storage solution validated by the Commercial Solutions for Classified (CSfC) Program. CSfC is an NSA strategy to provide cybersecurity solutions by taking advantage of commercially available industry solutions. 16 While CSfC encourages industry innovation, trustworthiness of the components is paramount. S. Selecting a pre-approved device from the CSfC Components List enables system architects to greatly reduce the time and cost needed to design a COTS encryption solution, while also reducing program risk. svr. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. S. Prequalification stage two: commercial lab testing, evaluation, validation. NIAP provided an overview. ”. S. . nsacustomers to select COTS products from the CSfC Components List to develop a WIDS/WIPS solution and then properly configure those products to achieve a level of assurance sufficient for a solution used to protect classified Data-in-Transit (DIT). CipherTrust Key Management integrates with industry-leading data at rest encryption solutions that are on the CSfC Components List. Agencies can partner with an NSA-approved trusted integrator to modernize their classified networks utilizing NSA-published Capability Packages. 1. 2 Reverted all changes in 7. CSfC Listed: CSfC components list. ) pertinent to the product. System integrators then apply to the NSA identifying the proposed product from the Component List and the application details. TI T=O . The CPs empower the client to implement secure solutions using independent, layered Commercial Off-the-Shelf products from the CSfC Components List. Customers and/or solution integrators will draw products from the published list of eligible CSfC components to create composed solutions for a particular operational capability. Multi-Site Connectivity Capability Package . Notes Note 1: The following selections apply to CSfC IPsec VPN Gateway functionality. RFI. NIAP: NIAP Home PagePalo Alto Networks PA-220 Series, PA-800 Series, PA-3200 Series, PA-5200 Series, PA-7000 Series, and VM Series Next-Generation Firewall with PAN-OS 10. 0 + Errata 20190201. Galaxy S23 Ultra 5G, Galaxy S22 Ultra 5G, Galaxy S22 5G, Galaxy S21 Ultra 5G, Galaxy S20+ 5G, Galaxy Z Flip, Galaxy XCover Pro, Galaxy A53 5G, Galaxy XCover6 Pro. These. NSA’s CSfC Components List, and the International Common Criteria Certified Products List. Business, Economics, and Finance. 1 is eligible to be used as a Certification Authority component in a Commercial Solutions for Classified (CSfC) solution and is listed on the CSfC Components List. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. Customers and Integrators should perform interoperability testing to ensure the components selected for their MSC Solution are interoperable. In order for a product to be placed on this list the product must currently be undergoing evaluation in the United States with a NIAP-approved Common Criteria Testing Laboratory (CCTL) and have completed an Evaluation Kick off Meeting (or equivalent) whereby CCEVS management has officially accepted the product into evaluation. The DTS1 is a small form-factor file server that weighs just three pounds, occupies less than 50 cubic inches,Overview. g. VANCOUVER, Wash. Government Procurement • NIST Cryptographic Validation Programs • Committee on National Security Systems Policy (CNSSP) #11 • Common Criteria Testing Laboratory (CCTL) Requirements • Evaluation Assurance Levels (EALs) • International Common Criteria Recognition. Each CSfC solution infrastructure component must have access to revocation status of certificates (e. 1993; UK) CSFC. As an inner tunnel CSfC solution, the Ruckus ICX 7450 can provide up to 48 10/100/1000 PoE+ interfaces for client device aggregation and 10Gbps of encryption. Vendors who wish to have their products eligible as CSfC components of a composed, layered. CSfC Capability Packages and the CSfC Components List can be found by visiting the NSA CSfC Components List page. and coalition partners. 2 NVMe SSD image courtesy Digistor. TI T=O MA -PS -12 If the solution is using a SRTP En dpoint, it must be chosen from the list of SRTP endpoints on the CSfC Components List. Compliance List (PCL) and closed with 81 completed product evaluations. CSfC is not a replacement for Type 1 products, according to the NSA; it is merely an alternative. As part of the CSfC program, NSA offers several Capability Packages as a starting point for users to implement their own solu- tions. and corresponding configuration information leveraging the list of COTS products from the CSfC Components List.