Evaluated Products List (EPL)
Wanted for Evaluation
In October 2009 government agency Chief Information Officers participated in a DSD survey to identify technology gaps in the EPL. Here is the survey result with examples of product types that are in high demand:
- Network security appliances with IPv6 support (IDS, IPS, firewall, application filter, VPN, accelerators and proxies);
- Mobile enterprise devices with secure data connectivity (email, contacts, calendar) and protection of data-at-rest;
- Virtualisation technologies with secure separation capabilities;
- Encrypted USB storage devices that provide protection of data-at-rest; and
- Portable/removable media (USB, CD, DVD) encryption products.
Products that enter into AISEP evaluation from the above list will be assigned a high priority to the evaluation process.
Please read the ‘Sponsorship for Evaluation’ page that provides information on how to submit your evaluation request.
For more information please see the AISEP and DSD Cryptographic Evaluation (DCE) Frequently Asked Questions (FAQ) pages.
The EPL includes products and systems that:
- [1] have successfully completed an AISEP evaluation
- [2] have completed a CC, up to and including EAL4, or an ITSEC certification, through a recognised overseas scheme, excluding the cryptographic capability component*
- [3] are currently undergoing
CC evalaution with AISEP
- [4] have successfully completed a DSD High-Grade evaluation
- [5] have successfully completed a DSD-approved evaluation.
Table 1 comprises products from [1], [2], [4] and [5] where DSD has performed some evaluation work. Products from [2] that DSD has not looked at are found on the Common Criteria Portal Certified Product List.
*Products with cryptographic capability may be sponsored by an Australian or New Zealand government agency to undergo a DSD Cryptographic Evaluation (DCE). On commencement of the DCE, the product is listed in Table 1. The various indicators for a DCE task are: Completed, see Consumer Guide; In Evaluation; On Hold; Planning; Halted, see Consumer Guide; No, see Consumer Guide; and Not Required.
Note: The AISEP regards products certified above EAL4 by a recognised overseas scheme to be at a maximum EAL4 assurance level.
Quick list: By Product
Access Control Devices and Systems |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 3+ | v-GO Access Accelerator Suite | Passlogix Inc | CC | AU / NZ (2008) | Completed | PDF (238Kb) |
|
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 2 | Iridian Technologies KnoWho Authentication Server and Private ID | Iridian Technologies | CC | AU / NZ (2003) | Completed | No |
Host Security Module Products |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| E 3 | AEP SureWare KeyPer 2.1 | AEP Systems International | ITSEC | UK (2001) | Completed | No |
| EAL 4+ | SafeNet Luna PCI configured for use in Luna SA 4.1 with backup | SafeNet | CC | Netherlands (2009) | In Evaluation | No |
Miscellaneous Products |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 1 | Cisco VoIP Telephony Solution | Cisco Systems | CC | GER (2005) | Not Required | PDF (385Kb) |
| EAL 2 | SQ-Phoenix Multifunction Encryptor | CES Communications | CC | AU / NZ (2005) | Completed | PDF (438Kb) |
| EAL 3 | Canon iR4570/ iR3570/ iR2870/ iR2270 Series iR Security Kit-B2 | Canon | CC | Japan (2006) | Completed | PDF (439Kb) |
| Canon iR6570 /iR5570 Series iR Security Kit-B3 | Canon | CC | Japan (2006) | Completed | PDF (438Kb) | |
| E 1 | NEC S2 (Mobile Satellite Terminal) | NEC | ITSEC | AU / NZ (2001) | Not Required | No |
| E 2 | INFORMIX-OnLine Dynamic Server V7.23 | Informix Software Limited | ITSEC | UK (1998) | Not Required | No |
| E 3 | Trusted Oracle7 Release 7.2.3.0.4 | Oracle | ITSEC | UK (1999) | Not Required | No |
| N/A | TalkSECURE Wireline 10.x and TalkSECURE Wireless 10.x | General Dynamics Decision Systems Australia and New Zealand | OTHER | AU / NZ (2001) | Completed | No |
Network and Network Related Devices and Systems |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 2 | Cisco Unified Wireless Network Solution | Cisco Systems | CC | USA (2009) | Planning | No |
| Sanctuary Device Control version 3.2 | Lumension Security | CC | USA (2007) | No, see consumer guide | PDF (227Kb) | |
| HP OpenView Select Access | Hewlett Packard | CC | AU / NZ (2006) | Completed | No | |
| Citrix Presentation Server 4.0 | Citrix Systems | CC | UK (2005) | Completed | PDF(441Kb) | |
| Citrix Presentation Server 4.5 | Citrix Systems | CC | UK (2005) | Completed | PDF(441Kb) | |
| Secure Remote Access (SRA) Client V3.7.1, Server V4.2.1 | ActivCard Developments | CC | AU / NZ (2005) | Completed | No | |
| Secure Access Family Release 5.1R2 | Juniper Networks Australia | CC | USA | Completed | PDF (374Kb) | |
| NetScreen Appliances | Juniper Networks Australia | CC | USA (2002) | Not Required | No | |
| Messaging Management System V4.6 | Tumbleweed Communication | CC | AU / NZ (2002) | Not Required | No | |
| ISA Server 2000 with Service Pack 1 and Feature Pack 1 Firewall | Microsoft | CC | GER (2003) | Not Required | No | |
| Cisco IOS/IPSec | Cisco | CC | AU / NZ (2007) | Completed | PDF (374Kb) | |
| EAL 2+ | Cisco Network Admission Control | Cisco Systems | CC | AU / NZ (2009) | Not Required | No |
| EAL 3 | Juniper Networks JUNOS 9.3 for J-Series and SRX Series Platforms | Juniper Networks | CC | AU / NZ (2009) | Planning | No |
| EAL 3+ | Juniper
Networks Secure Access Family Version 6.4R2 |
Juniper Networks | CC | AU/NZ 2010 | No, see consumer guide | PDF (227Kb) |
| EAL 4 | Datacryptor 2000 V3.3 | Thales e-Security (Asia) | CC | UK | Completed | PDF (368Kb) |
| Cisco IOS IPSec 12.3(6a) | Cisco Systems | CC | AU / NZ (2006) | Completed | PDF (382Kb) | |
| Cisco IOS IPSec 12.3(6f) | Cisco Systems | CC | AU / NZ (2006) | Completed | PDF (383Kb) | |
| Cisco IPSec Crypto System | Cisco Systems | CC | AU / NZ (2002) | Completed | No | |
| Gauntlet Internet Firewall V6.0 on Sun Solaris Version 2.8 | McAfee | CC | AU / NZ (2002) | Not Required | No | |
| Senetas Cyphercell ATM Encryptor V1.2.1 | Senetas | CC | AU / NZ (2001) | Completed | No | |
| BorderWare Firewall Server V 6.1.1 | BorderWare Technologies | CC | UK (2000) | Not Required | No | |
| Juniper Netscreen Family with ScreenOS 5.0.0r9 | Juniper Networks Australia . | CC | USA | Completed | PDF (377Kb) | |
| Juniper Netscreen Family with ScreenOS 5.4.0r4 | Juniper Networks Australia | CC | USA (2007) | Completed | PDF (377Kb) | |
| CyberGuard Firewall for UnixWare/Premium Appliance Firewall V4.3 (to Version 5.2) | CyberGuard Europe | CC | UK (2000) | Not Required | No | |
| Datacryptor 2000 V3.41 | Thales e-Security Limited |
CC | AU/NZ (2007) | Completed | No | |
| Datacryptor v3.511 / Datacryptor 4d | Thales e-Security Limited |
CC | AU/NZ (2007) | Completed | No | |
| Senetas CypherNET Multi-Protocol Encryptor | Senetas | CC | AU / NZ (2008) | Completed | PDF (439Kb) | |
| SwitchViewSC Series Switches | Avocent Huntsville Corp | CC | US (2007) | Not Required | PDF (443Kb) | |
| EAL 4+ | Cisco Adaptive Security Appliances 5505, 5510, 5520, 5540 and 5550, ASA VPN Version 7.2(4), VPN Client 5.0.05.0290 | Cisco Systems | CC | US (2009) | Planning | No |
| Cisco IOS Firewall Version 12.3(14)T and 12.4(4)T | Cisco Systems | CC | USA | Not Required | PDF (377Kb) | |
| Cisco Secure PIX and ASA Firewalls V7.2(4)30 | Cisco Systems | CC | USA | Not Required | PDF (379Kb) | |
| Cisco Firewall Services Module (FWSM) version 3.1 (4) for Cisco Catalyst 6500 switches and Cisco 7600 routers. | Cisco Systems | CC | USA (2007) | Not Required | PDF (408Kb) | |
| Sidewinder
7.0.0.02 Firewall |
Secure Computing | CC | USA (2007) |
Completed | PDF (431Kb) | |
| Cisco
IOS IPSec on the Integrated Services Routers,VPN Services Module
(VPNSM) and IPSec VPN Shared Port Adapter(SPA), including VLAN
Separation |
Cisco Systems | CC | USA (2008) |
Completed | PDF (473Kb) | |
| Nortel
VPN Router v7.05 |
Nortel Networks | CC | CAN (2008) |
Completed | PDF (107Kb) | |
| Senetas Encryptor Range comprising CypherNET Ethernet Encryptor, CypherNET Fibre Channel Encryptor, CypherStream Ethernet Encryptor and CypherManager | Senetas | CC | AU/NZ (2009) | |||
| EAL 7 | Secure Optical Switch | Compucat Research | CC | AU/NZ (2009) | Not Required | No |
| E 1 | DFTS Switch DPN 100/20 VG36.03 | Nortel Networks | ITSEC | UK (2000) | Not Required | No |
| DFTS Switch Passport Switch 6480 V5.0.16 | Nortel Networks | ITSEC | UK (2000) | Not Required | No | |
| SecurPAC IEM V1.01 | SecureNet | ITSEC | AU / NZ | Not Required | No | |
| E 3 | OMEGA Version 7.12 | ICL Defence | ITSEC | UK (2000) | Not Required | No |
| MailGuard Baastion Release 1.0 | Clearswift | ITSEC | UK (2000) | Not Required | No | |
| Cyberguard Firewall V2.2.1e | Cyberguard | ITSEC | UK (1997) | Not Required | No | |
| E 5 | BAE Systems Mobile Trusted Filter | BAE Systems Australia Ltd | ITSEC | AU/NZ (2007) | Not Required | No |
| BAE Systems Trusted Filter V1 | BAE Systems | ITSEC | AU / NZ (2001) | Not Required | PDF (368Kb) | |
| E 6 | Serial Data Regulator V1 | Compucat | ITSEC | AU / NZ (2003) | Not Required | PDF (369Kb) |
| Interactive Link Multiple Computer Switch V3.3 | BAE Systems | ITSEC | AU / NZ (2000) | Not Required | PDF (369Kb) | |
| Interactive Link Data Diode Device V1.2 | BAE Systems | ITSEC | AU / NZ (1999) | Not Required | No | |
| CSX-100 V1 | Compucat Research | ITSEC | AU / NZ | Not Required | No | |
| Interactive Link V5 | BAE Systems | ITSEC | AU / NZ (2000) | Not Required | No | |
| HG | Interactive Link – Multiple Computer Switch | BAE Systems | HG | AU (2002) | Not Required | No |
| Interactive Link – Data Diode | BAE Systemse | HG | AU (2002) | Not Required | No | |
| Interactive Link – Keyboard Switch | BAE Systems | HG | AU (2004) | Not Required | No | |
| Secure Optical Switch | Compucat Research | HG | AU (2007) | Not Required | No | |
| Secure Optical Switch (Remote Operation) | Compucat Research | HG | AU (2007) | Not Required | No | |
| Avocent
SwitchView SC4-UAD KVM Switch |
Avocent Huntsville Corp | HG | US (2007) | Not Required | PDF (405Kb) | |
| Interactive Link - Multiple Computer Switch (With USB) Ultra | BAE Systems | HG | AU(2008) | Not Required | PDF (408Kb) | |
| N/A | Mini DCAP | Thales e-Security | Other | AU/NZ(2007) | Completed | PDF (433Kb) |
Operating System Products |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 1 | Microsoft Windows Vista and Windows Server 2008 | Microsoft | CC | AU / NZ (2008) | Not Required | No |
| EAL 4 | Nokia IPSO 3.5 and 3.5.1 | Nokia Enterprise Solutions | CC | UK | Completed | No |
| EAL 4+ | Windows 2000 Professional, Server and Advanced Server with SP3 and Q326886 Hotfix | Microsoft | CC | USA (2002) | Completed | No |
| Windows Server 2003, Windows XP | Microsoft | CC | USA | Stopped | No | |
| E 3 | HP-UX V10.20 | Hewlett Packard | ITSEC | UK (1999) | Not Required | No |
| Sun Solaris V2.6SE | Sun Microsystems | ITSEC | UK (1999) | Not Required | No | |
| AIX V4.3 | IBM | ITSEC | GER (1998) | Not Required | No | |
| Sun Trusted Solaris V2.5.1 | Sun Microsystems | ITSEC | UK (1998) | Not Required | No | |
PC Security Products |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 1 | PC Guardian Encryption Plus Hard Disk V7.0 | PC Guardian | CC | AU / NZ (2003) | Completed | No |
| EAL 2 | Pointsec Protector | Pointsec | CC | UK | Completed | PDF (369Kb) |
Silicon Data Vault Desktop |
Secure Systems | CC | USA (2006) | Completed | PDF (369Kb) | |
| EAL 3 | SafeGuard Easy V3.20 | Utimaco Safeware AG | CC | GER | Completed | PDF (409Kb) |
| EAL 4 | Pointsec PC V4.3 | Pointsec | CC | USA (2005) | Completed | PDF (368Kb) |
| McAfee Endpoint Encryption Version 5.0 Previously SafeBoot device encryption | McAfee | CC | UK (2006) | Completed | PDF (366Kb) | |
| SafeNet ProtectDrive Enterprise V8.1.1 | SafeNet, Inc | CC | AU/NZ (2008) | Completed | PDF (437Kb) | |
| N/A |
SDV18A Laptop SDV - LD10d SDV181B Laptop SDV - LU10d |
Secure Systems | Other | AUS/NZ (2007) | Completed | PDF (348Kb) |
| HG | HGSDV |
Secure Systems | Australian High Grade Evaluation Program | AUS (2007) | Completed | PDF (401Kb) |
PKI Products |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 2 | iKey 2032 USB Token | Rainbow Technologies Australia | CC | AU / NZ (2004) | Completed | No |
| EAL 3 | Timestamp Server V2.0.2 | Cybertrust | CC | AU / NZ (2003) | Not Required | No |
| EAL 4 | Luna CA V3.97 | SafeNet Inc | CC | CAN | Completed, see consumer guide | PDF (229Kb) |
| TrustedNet Connect V2.0 | SecureNet | CC | AU / NZ (2003) | Completed | No | |
| VeriSign Processing Center V3.0 | Verisign | CC | AU / NZ (2001) | Not Required | No | |
| EAL 4+ | Cybertrust UniCERT V5.2.1 | Cybertrust | CC | AU / NZ (2006) | Completed | No |
| E 3 | UniCERT Version 3.1.2A | Cybertrust | ITSEC | AU / NZ (2000) | Completed | No |
| N/A | ProtectServer Orange (CSA8000) | SafeNet | Other | AU/NZ (2007) | Completed | PDF (337Kb) |
ICs, Smart Cards and Smart Card related Devices and Systems |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 2 | Gemalto MultiApp Platform, version 1.0 | Gemalto | CC | Australia/New Zealand (2009) | Completed | PDF (250Kb) |
| EAL 4+ | COSMOPOLIC 2.1 | Oberthur Card Systems | CC | FRA (2002) | Completed | No |
| LM Gemplus GemXpresso Pro | LM Gemplus | CC | GER (2002) | Completed | No | |
| E 4 | STARCOS® SPK 2.3 | Giesecke & Devrient | ITSEC | AU / NZ (2004) | Completed | No |
| E 6 | MULTOS V1Q | Keycorp | ITSEC | AU / NZ (2003) | Completed | No |
| MULTOS V1N | Keycorp | ITSEC | AU / NZ (2003) | Completed | No | |
Mobile Products |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 2+ | BlackBerry Wireless Handheld Software | Research in Motion | CC | Canada (2007) | Completed | PDF (440Kb) |
| BlackBerry Enterprise Server | Research in Motion | CC | Canada (2007) | Completed | PDF (255Kb) | |
| Microsoft Windows Mobile 6 | Microsoft | CC | Australia/New Zealand (2007) | Not Started | PDF (453Kb) | |
| Microsoft Windows Mobile 6.1 | Microsoft | CC | Australia/New Zealand (2008) | Progressing | PDF (502 Kb) | |
| Microsoft Windows Mobile 5 with the Messaging and Security Feature Pack (MSFP) | Microsoft | CC | Australia/New Zealand (2007) | Not Started | PDF (454Kb) | |
| EAL 4+ | Microsoft Windows Mobile 6.1 | Microsoft | CC | Australia/New Zealand (2009) | Progressing | PDF (503Kb) |
| Microsoft Windows Mobile 6.5 | Microsoft | CC | Australia/New Zealand (2010) | Progressing | ||
| Microsoft System Center Mobile Device Manager 2008 | Microsoft | CC | Australia/New Zealand (2009) | Progressing | PDF (498Kb) | |
| Microsoft System Center Mobile Device Manager 2008 SP1 | Microsoft | CC | Australia/New Zealand (2009) | Progressing | PDF (496Kb) | |
Data Protection |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 2 | Becrypt DISK Protect | Becrypt | CC | Australia/New Zealand (2009) | No, see consumer guide | PDF (227Kb) |
| Becrypt Trusted Client | Becrypt | CC | Australia/New Zealand (2009) | No, see consumer guide | PDF (227Kb) | |
| EAL 2+ | Eaglehawk SBX Enigma Version 4.2.4 | Eaglehawk | CC |
Australia/New Zealand (2009) | No, see consumer guide | PDF (227Kb) |
| SanDisk Cruzer Enterprise FIPS Edition | SanDisk | CC | Australia/New Zealand (2009) | Completed, see consumer guide | PDF (229Kb) | |
| EAL 3+ | IBM Tivoli Storage Manager | IBM | CC | Australia/New Zealand (2009) | Not Required | No |
| N/A | Pocket
SDV - P10d |
Secure Systems | Other | AUS/NZ (2007) | Completed | PDF (348Kb) |
Other Devices and Systems |
||||||
| Assurance Level | Product | Vendor | Cert Method | Country of Certification | Crypt Evaluation | Consumer Guide |
| EAL 2+ | Noggin OCA Incident Manager v1.1 |
Noggin IT | CC | Australia/New Zealand (2010) | Not required | No |
| EAL 3+ | Xerox
WorkCentre 4150 / 4150s / 4050x / 4150xf Multifunction Systems |
Xerox | CC | Australia/New Zealand (2009) | No, see consumer guide | PDF (227Kb) |
Table 2 comprises products from [3]. These products undergo a DCE where applicable.
Network and Network Related Devices and Systems |
|||||
| Assurance Level | Product | Vendor | Cert Method | Est Date of Completion | Cert Progress |
| EAL 2 | Wyse Device Manager Enterprise Edition 4.7.2 | Wyse Technology | CC | Q3 2010 | Progressing |
| EAL 3+ | Juniper Networks IC Series UAC Appliances Version 3.0 | Juniper Networks | CC | Q3 2010 | Progressing |
Data Protection |
|||||
| Assurance Level | Product | Vendor | Cert Method | Est Date of Completion | Cert Progress |
| EAL 4+ | Secure Objects Incorporating Secure Envelopes | Cocoon Data | CC | Q3 2010 | Progressing |
Other Devices and Systems |
|||||
| Assurance Level | Product | Vendor | Cert Method | Est Date of Completion | Cert Progress |
| EAL 1+ (augmented by ALC_FLR.3) |
Microsoft Exchange Server 2010 | Microsoft Pty Ltd | CC | Q2 2010 | Progressing |
| EAL 3+ | Xerox
WorkCentre 4250 & 4260 Multifunction Systems |
Xerox | CC | Q3 2010 | Progressing |
| EAL 4+ (augmented by ALC_FLR.3) |
Microsoft Exchange Server 2010 | Microsoft Pty Ltd | CC | Q4 2010 | Progressing |
EPL announcements are notified under the News link on the DSD home page.