The response to XG Firewall v18 has been enormously positive, with several thousand firewalls having already been upgraded to v18. Partners and customers report outstanding quality and a smooth upgrade.
We are pleased to announce that XG Firewall has recently received both Common Criteria EAL4+ certification and ICSA Labs Corporate Firewall Certification.
Common Criteria is a standard for evaluating the security features and capabilities of information technology products and is accepted by many countries around the globe. The highest internationally, mutually recognized certification level, EAL4+, requires an inspection of the development site, as well as close scrutiny of the complete source code by independent experts. The certification process also includes flaw remediation, which evaluates the processes Sophos uses to support XG Firewall with future security and maintenance updates.
The Common Criteria Security Certificate warrants to customers, especially to those within the government sector, that security requirements are properly implemented and that the processes used meet recognized standards. One particular benefit of a Common Criteria certification is its compliance with various purchasing policies, mandating that federal departments and agencies shall acquire, for use on national security systems, only those information technology products that have been validated according to Common Criteria.
The certificate is available on the certification body’s website.
The goal of ICSA Labs certification testing is to increase user and enterprise trust in information security products and solutions. For nearly 30 years, ICSA Labs has been providing credible, independent, third-party security product testing and certification for many of the world’s top security product vendors and service providers. Enterprises worldwide rely on ICSA Labs to set and apply objective testing and certification criteria measuring product security, compliance, and performance.
After rigorous security testing, Sophos XG Firewall met all of ICSA Labs’ firewall requirements to attain ICSA Labs Firewall Certification.
The certificate is attached below and the full report is available on the ICSA Labs website.
Full List of Regulatory Compliance Documents