FTP_ITC_EXT.1.1 in the VPNGW EP as currently written in the EP is slightly confusing and does not adequately explain how it is integrated with NDcPP.

FTP_ITC_EXT.1.1 in VPN Gateway v2.1 Extended Package is modified as follows:

The name of the element is changed from FTP_ITC_EXT.1.1 to FTP_ITC.1.1

The application note is replaced with the following:

The NDcPP allows trusted channels other than IPsec to be available for communication with external IT entities but defers to this EP to specify VPN Gateway functionality. To be compliant with this EP, the selection is made such that the TOE must provide the IPsec protocol for its VPN Gateway functionality. The application note for this element in the NDcPP should also be applied.

See issue description.