The Network Interpretations Team (NIT) has issued a technical decision regarding Transport mode and tunnel mode in IPSEC communications in NDcPP v1.0 and FW cPP v1.0.

To align with NIT interpretation # 201614, the following changes are made to NDcPP V1.0 and FWcPP v1.0:

FCS_IPSEC_EXT.1.3 The TSF shall implement [selection: transport mode, tunnel mode].

Application Note 57

The selection of supported modes shall be performed according to RFC 4301. The TSS shall provide details about the supported modes.

For further information, please see the NIT interpretation at:

https://www.niap-ccevs.org/Documents_and_Guidance/ccevs/NITDecisionRfi14rev2.pdf.

See issue description.