NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

NIAP Approved Protection Profiles

In order to ensure consistency in evaluations, all schemes currently evaluating or considering evaluation of products compliant with NIAP-approved Protection Profiles (PP) should notify  The notification should include the product name, vendor, evaluation start date, and NIAP-approved PP/EP with which compliance is being claimed.  NIAP will collaborate with the scheme to address questions, provide guidance, and solicit feedback for improvements to the PPs.

Effective October 1, 2009, any product accepted into evaluation under the U.S. CC Scheme must claim compliance to a NIAP-approved PP.  The following Protection Profiles (PP) have been approved for use by vendors for evaluation of products under the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) and the Common Criteria Recognition Arrangement (CCRA). 

NIAP is currently working with industry, our customers, and the Common Criteria community to create Protection Profiles for each technology.  These Protection Profiles include assurance activities with the goal of achievable, repeatable and testable evaluation activities for each particular technology (see PPs in Development for a status of each PP). 

For those technologies where a PP does not yet exist or is not in development, NIAP will work with the vendor and/or customer to offer a path to evaluation.  Please see our Guidance for when No PP Exists for more information. 

A Transition End Date of a PP is determined by NIAP (in cooperation with the applicable Technical Community) upon initial publication of a NIAP-approved PP and is posted with the publication of the PP.  Typically, the Transition Window for a PP will last six months.  During the Transition Window, products will be accepted into evaluation against the preceding version of the PP.  All relevant products submitted for evaluation after the Transition End Date shall only be evaluated against the new NIAP-approved PP. 

38 Validated Protection Profiles
   Tech Type    Profile Name    CC Ver.    Short Name    Sponsor    Approval Date Sunset Date
This list was generated on Saturday, October 22nd, 2016, at 7:35 AM
Email Client Application Software Extended Package for Email Clients v2.0 3.1 PP_APP_EMAILCLIENT_EP_v2.0 NSA 2015-06-18
Redaction Tool Application Software Extended Package for Redaction Tools 3.1 PP_APP_RED_EP_V2.0 NSA 2015-12-11
Web Browser Application Software Extended Package for Web Browsers v2.0 3.1 PP_APP_WEBBROWSER_EP_v2.0 NSA 2015-06-16
Encrypted Storage collaborative Protection Profile for Full Drive Encryption - Encryption Engine Version 1.0 3.1 CPP_FDE_EE_V1.0   2015-02-28
Encrypted Storage collaborative Protection Profile for Full Drive Encryption – Authorization Acquisition Version 1.0 3.1 CPP_FDE_AA_V1.0   2015-02-27
Network Device collaborative Protection Profile for Network Devices Version 1.0 3.1 CPP_ND_V1.0   2015-02-27
Firewall collaborative Protection Profile for Stateful Traffic Filter Firewalls Version 1.0 3.1 CPP_FW_V1.0   2015-02-27
Enterprise Security Management Enterprise Security Management - Identity and Credential Management Version 2.1 3.1 PP_ESM_ICM_V2.1 NSA 2013-11-21
Enterprise Security Management Enterprise Security Management - Policy Management Version 2.1 3.1 PP_ESM_PM_V2.1 NSA 2013-11-21
IDS/IPS Extended Package (EP) for Wireless Intrusion Detection/Prevention Systems (WIDS/WIPS) Version 1.0 3.1 EP_WIDS_V1.0 NSA 2016-10-06
Network Device Extended Package for Authentication Servers Version 1.0 3.1 PP_NDCPP_APP_AUTHSVR_EP_V1.0   2015-08-07
IDS/IPS Extended Package for Intrusion Prevention Systems Version 2.1 3.1 PP_NDCPP_IPS_EP_V2.1 NSA 2016-01-28
Network Encryption Extended Package for MACsec Ethernet Encryption Version 1.2 3.1 PP_NDCPP_MACSEC_EP_V1.2 NSA 2016-05-10
Mobility Extended Package for Mobile Device Management Agents Version 2.0 3.1 PP_MDM_AGENT_V2.0 NSA 2014-12-31
Remote Access Extended Package for Secure Shell (SSH) 3.1 PP_SSH_EP_v1.0 NSA 2016-02-19
Network Device Extended Package for Session Border Controller Version 1.0 3.1 CPP_ND_SBC_EP_V1.0   2015-07-24 2017-03-28 [Sunset Date]
Network Device Extended Package for Session Border Controller Version 1.1 3.1 EP_SBC_V1.1 NSA 2016-09-28
SIP Server Extended Package for SIP Server Version 2.0 3.1 PP_NDCPP_SIP_EP_V2.0 NSA 2015-12-01
Encrypted Storage Extended Package for Software File Encryption Version 1.0 3.1 PP_APP_SWFE_EP_v1.0 NSA 2014-11-10
VoIP Extended Package for Voice and Video over IP (VVoIP) Version 1.0 3.1 EP_VVOIP_V1.0 NSA 2016-09-28
Virtual Private Network Extended Package for VPN Gateways Version 2.0 3.1 PP_NDCPP_VPN_GW_EP_V2.0 NSA 2015-12-01
Wireless LAN Extended Package for WLAN Client Version 1.0 3.1 PP_WLAN_CLI_EP_V1.0 NSA 2016-02-11
Wireless LAN ND CPP EP Wireless LAN Access System 3.1 PP_WLAN_AS_EP_V1.0   2015-05-28
Application Software Protection Profile for Application Software Version 1.1 3.1 PP_APP_v1.1 NSA 2014-11-06 2016-10-25 [Sunset Date]
Application Software Protection Profile for Application Software Version 1.2 3.1 PP_APP_v1.2 NSA 2016-04-25
BIOS Update Protection Profile for BIOS Update for PC Client Devices Version 1.0 3.1 PP_BIOS_v1.0 NSA 2013-02-13
Certificate Authority Protection Profile for Certification Authorities Version 1.0 3.1 PP_CA_v1.0 NSA 2014-05-16
Enterprise Security Management Protection Profile for Enterprise Security Management-Access Control Version 2.1 3.1 PP_ESM_AC_V2.1 NSA 2013-11-12
Operating System Protection Profile for General Purpose Operating Systems Version 4.1 3.1 PP_OS_V4.1 NSA 2016-03-09
Multi Function Device Protection Profile for Hardcopy Devices Version 1.0 3.1 PP_HCD_V1.0 NSA 2015-09-11
Virtual Private Network Protection Profile for IPsec Virtual Private Network (VPN) Clients Version 1.4 3.1 PP_VPN_IPSEC_CLIENT_V1.4 NSA 2013-10-23
Mobility Protection Profile for Mobile Device Fundamentals Version 2.0 3.1 PP_MD_v2.0 NSA 2014-09-17 2016-12-10 [Sunset Date]
Mobility Protection Profile for Mobile Device Fundamentals Version 3.0 3.1 PP_MD_v3.0 NSA 2016-06-10
Mobility Protection Profile for Mobile Device Management Version 2.0 3.1 PP_MDM_V2.0 NSA 2014-12-31
Peripheral Switch Protection Profile for Peripheral Sharing Switch Version 3.0 3.1 PP_PSS_V3.0 NSA 2015-02-13
Virtualization Protection Profile for Server Virtualization Version 1.1 3.1 PP_SV_V1.1 NSA 2015-10-07
USB Flash Drive Protection Profile for USB Flash Drives Version 1.0 3.1 PP_USB_FD_v1.0 NSA 2011-12-01
VoIP Protection Profile for VOIP Applications Version 1.3 3.1 PP_VOIP_V1.3 NSA 2014-11-06 2017-03-28 [Sunset Date]