
Stormshield - Certified and Qualified
Stormshield
If you want to secure your company's network, you want to be sure that the firewall you have bought meets these requirements. No one wants to buy something and only find out afterwards that the purchased solution does not work or does not meet the requirements. In the worst case, it may even have security gaps that make the network more insecure than before. Therefore, many manufacturers compete for the favour of buyers with certifications that attest to the reliability of the security solutions they offer. Nowadays, this is only partially sufficient, since it is precisely in this area that the trustworthiness of the manufacturer plays a major role - from production, to delivery, to the functioning of the product. Therefore, several European countries have created a superior labelling; the qualification. While many manufacturers continue to advertise with certificates, Stormshield, on the other hand, is not only certified, but also qualified according to EU guidelines.
What is the difference between certification and qualification?
With certification, the manufacturer specifies a security target that the firewall should achieve. A test centre then tests whether these goals are achieved. Based on the level of the hurdles, the certificate EAL3+, EAL4+ etc. is then awarded.
In the case of a qualification by the Agence Nationale De La sécurité Des Systèmes D'Information (National Agency for Information Systems Security, or ANSSI for short), on the other hand, not only the test criteria of the certification are applied, but also further analyses, including an examination of the product's source code. If the qualification is passed, both the product and the manufacturing company are given a vote of confidence by the French government.
This qualification is also a prerequisite for the use of products in environments whose information is marked "NATO RESTRICTED" or "EU RESTRICTED". In such environments, unauthorised disclosure of information to third parties could be detrimental to NATO or EU interests. With this unique qualification, you can be confident that Stormshield's solutions will meet the security needs of your organisation.
In addition, in order to obtain the certification, the qualification of two independent authorities of EU member states has to be obtained. Again, certification alone is not enough. Stormshield also has the qualification of the Netherlands, as well as the recommendation of the German Federal Office for Information Security (BSI).
If you use Stormshield, you have the following advantages:
- A product that has been able to prove its reliability in a certification procedure.
- Tested by ANSSI and recommended to the BSI.
- Source code that has been reviewed by independent experts
- A product from a company whose process of development, delivery and support has been recognised as trustworthy by at least one EU member state.