The intent for standalone VPN Client applications (those which are not bundled as part of an OS or Mobile Device) is that they implement their own cryptography. There are numerous inconsistencies within the PP-Module related to standalone VPN client applications that will require Technical Community input. NIAP will engage with the TC to determine the modifications needed to accomodate standalone VPN applications.

The VPN Client PP-Module is modified to remove all references to the Application Software PP as a Base-PP.  Until inconsistencies with in the PP-Module are resolved, NIAP will no longer accept evaluations against the PP-Configuration for Application Software and Virtual Private Network (VPN) Clients, Version 1.0, 04 September 2019.

See issue description.