To get an E3 rating the product has to be submitted for testing. I think the
company also has to prove they meet certain standards for documentation etc.
If you need an E3 firewall you should also be looking at products with an
EAL4 rating as this is equivalent. In fact, it will be easier to get an EAL4
rated product since this is non-UK specific, but it still recognised as
valid in the UK.
Since getting approval costs money you aren't going to find any inexpensive
firewall product that has it. You will be looking at products from peeople
like Cisco and Checkpoint and even then very specific products since the
approval only covers the configuration that was tested.
----- Original Message -----
From: "Mark Jawdoszak" <MarkJ at logsysgroup dot com>
To: <m0n0wall at lists dot m0n0 dot ch>
Sent: Wednesday, August 09, 2006 11:34 AM
Subject: [m0n0wall] ITSEC Security Question...
I was wondering if m0n0wall or any other firewall following the same
ideas (i.e. free) have or will be covered under the EU's ITSEC rules?
I've been using m0n0walls for many different applications (as well as a
firewall :D), but management want (and need) to know of E3 security
certified firewalls. I want to use m0n0 boxes for this, but as they
don't seem to be covered under ITSEC regulations, I was wondering if
this could be done?
I have already searched the site, and the mailing list.
Thanks in advance,
Logsys Support, Leeds
+44 (0)113 384 0400 - ext 411
markj at logsysgroup dot com
This message and any attachments are intended for the stated recipient only
and in no
way constitute a binding contractual agreement, order, or commitment by the
WHO IS NOT TO BE BOUND BY ANYTHING CONTAINED HEREIN. If you have
received this message in error, please return it to the sender, indicating
such and then
delete and destroy all copies in your possession.