NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

NIAP Approved Protection Profiles

In order to ensure consistency in evaluations, all schemes currently evaluating or considering evaluation of products compliant with NIAP-approved Protection Profiles (PP) should notify niap@niap-ccevs.org.  The notification should include the product name, vendor, evaluation start date, and NIAP-approved PP/EP with which compliance is being claimed.  NIAP will collaborate with the scheme to address questions, provide guidance, and solicit feedback for improvements to the PPs.

Effective October 1, 2009, any product accepted into evaluation under the U.S. CC Scheme must claim compliance to a NIAP-approved PP.  The following Protection Profiles (PP) have been approved for use by vendors for evaluation of products under the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) and the Common Criteria Recognition Arrangement (CCRA). 

NIAP is currently working with industry, our customers, and the Common Criteria community to create Protection Profiles for each technology.  These Protection Profiles include assurance activities with the goal of achievable, repeatable and testable evaluation activities for each particular technology (see PPs in Development for a status of each PP). 

For those technologies where a PP does not yet exist or is not in development, NIAP will work with the vendor and/or customer to offer a path to evaluation.  Please see our Guidance for when No PP Exists for more information. 

A Transition End Date of a PP is determined by NIAP (in cooperation with the applicable Technical Community) upon initial publication of a NIAP-approved PP and is posted with the publication of the PP.  Typically, the Transition Window for a PP will last six months.  During the Transition Window, products will be accepted into evaluation against the preceding version of the PP.  All relevant products submitted for evaluation after the Transition End Date shall only be evaluated against the new NIAP-approved PP. 

36 Validated Protection Profiles
   Tech Type    Profile Name    CC Ver.    Short Name    Sponsor    Approval Date Sunset Date
This list was generated on Wednesday, May 24th, 2017, at 3:53 AM
Encrypted Storage collaborative Protection Profile for Full Drive Encryption - Authorization Acquisition Version 2.0 3.1 CPP_FDE_AA_V2.0   2016-09-09
Encrypted Storage collaborative Protection Profile for Full Drive Encryption - Encryption Engine Version 2.0 3.1 CPP_FDE_EE_V2.0   2016-09-09
Network Device collaborative Protection Profile for Network Devices Version 1.0 3.1 CPP_ND_V1.0   2015-02-27
Firewall collaborative Protection Profile for Stateful Traffic Filter Firewalls Version 1.0 3.1 CPP_FW_V1.0   2015-02-27
Network Device Extended Package for Authentication Servers Version 1.0 3.1 PP_NDCPP_APP_AUTHSVR_EP_V1.0 NIAP 2015-08-07
Virtualization Extended Package for Client Virtualization Version 1.0 3.1 EP_CV_V1.0 NIAP 2016-11-22
Email Client Extended Package for Email Clients v2.0 3.1 PP_APP_EMAILCLIENT_EP_v2.0 NIAP 2015-06-18
SIP Server Extended Package for Enterprise Session Controller (ESC) Version 1.0 3.1 EP_ESC_V1.0 NIAP 2016-10-25
IDS/IPS Extended Package for Intrusion Prevention Systems Version 2.1 3.1 PP_NDCPP_IPS_EP_V2.1 NIAP 2016-01-28
Network Encryption Extended Package for MACsec Ethernet Encryption Version 1.2 3.1 PP_NDCPP_MACSEC_EP_V1.2 NIAP 2016-05-10
Mobility Extended Package for Mobile Device Management Agents Version 3.0 3.1 EP_MDM_AGENT_V3.0 NIAP 2016-11-21
Redaction Tool Extended Package for Redaction Tools 3.1 PP_APP_RED_EP_V2.0 NIAP 2015-12-11
Remote Access Extended Package for Secure Shell (SSH) 3.1 PP_SSH_EP_v1.0 NIAP 2016-02-19
Virtualization Extended Package for Server Virtualization Version 1.0 3.1 EP_SV_V1.0 NIAP 2016-11-22
Network Device Extended Package for Session Border Controller Version 1.1 3.1 EP_SBC_V1.1 NIAP 2016-09-28
Encrypted Storage Extended Package for Software File Encryption Version 1.0 3.1 PP_APP_SWFE_EP_v1.0 NIAP 2014-11-10
VoIP Extended Package for Voice and Video over IP (VVoIP) Version 1.0 3.1 EP_VVOIP_V1.0 NIAP 2016-09-28
Virtual Private Network Extended Package for VPN Gateways Version 2.1 3.1 EP_VPN_GW_V2.1 NIAP 2017-03-08
Web Browser Extended Package for Web Browsers v2.0 3.1 PP_APP_WEBBROWSER_EP_v2.0 NIAP 2015-06-16
IDS/IPS Extended Package for Wireless Intrusion Detection/Prevention Systems (WIDS/WIPS) Version 1.0 3.1 EP_WIDS_V1.0 NIAP 2016-10-06
Wireless LAN Extended Package for Wireless LAN Access System 3.1 PP_WLAN_AS_EP_V1.0 NIAP 2015-05-28
Wireless LAN Extended Package for Wireless LAN Client Version 1.0 3.1 PP_WLAN_CLI_EP_V1.0 NIAP 2016-02-11
Application Software Protection Profile for Application Software Version 1.2 3.1 PP_APP_v1.2 NIAP 2016-04-25
BIOS Update Protection Profile for BIOS Update for PC Client Devices Version 1.0 3.1 PP_BIOS_v1.0 NIAP 2013-02-13
Certificate Authority Protection Profile for Certification Authorities Version 2.0 3.1 PP_CA_v2.0 NIAP 2016-10-28
Enterprise Security Management Protection Profile for Enterprise Security Management - Identity and Credential Management Version 2.1 3.1 PP_ESM_ICM_V2.1 NIAP 2013-11-21
Enterprise Security Management Protection Profile for Enterprise Security Management - Policy Management Version 2.1 3.1 PP_ESM_PM_V2.1 NIAP 2013-11-21
Enterprise Security Management Protection Profile for Enterprise Security Management-Access Control Version 2.1 3.1 PP_ESM_AC_V2.1 NIAP 2013-11-12
Operating System Protection Profile for General Purpose Operating Systems Version 4.1 3.1 PP_OS_V4.1 NIAP 2016-03-09
Multi Function Device Protection Profile for Hardcopy Devices Version 1.0 3.1 PP_HCD_V1.0 NIAP 2015-09-11
Virtual Private Network Protection Profile for IPsec Virtual Private Network (VPN) Clients Version 1.4 3.1 PP_VPN_IPSEC_CLIENT_V1.4 NIAP 2013-10-23
Mobility Protection Profile for Mobile Device Fundamentals Version 3.0 3.1 PP_MD_v3.0 NIAP 2016-06-10
Mobility Protection Profile for Mobile Device Management Version 3.0 3.1 PP_MDM_V3.0 NIAP 2016-11-21
Peripheral Switch Protection Profile for Peripheral Sharing Switch Version 3.0 3.1 PP_PSS_V3.0 NIAP 2015-02-13
USB Flash Drive Protection Profile for USB Flash Drives Version 1.0 3.1 PP_USB_FD_v1.0 NIAP 2011-12-01
Virtualization Protection Profile for Virtualization Version 1.0 3.1 PP_BASE_VIRTUALIZATION_V1.0 NIAP 2016-11-22