TD0371: Section F.2 [Use Case 2]
Updates are needed for "Use Case 2 Enterprise-owned device for specialized, high-security use"
FIA_X509_EXT.2.1 - Remove from the use case.
FPT_AEX_EXT.7.1 - Remove from the use case.
For_X509_EXT.2.1 - It was not the intent to mandate that a native IPsec client (and thus IPsec VPN Client Module) has to be in the ST.
For FPT_AEX_EXT.7.1 - Native applications are unable to meet this requirement as written. This SFR will be reevaluated in the next update of the PP.