Which official valuable certificates pfSense+, TNSR and Netgate-branded hardware already has?

Sergei_Shablovsky

Dear Netgate Team!

Is the pfSense+ or TNSR included / sertified in:

Commercial Solutions for Classified Components List (CSfC) by National Security Agency;
FIPS 140-3, NSA CSfC, DISA APL, FIPS 140-2,…;
DoDIN APL;
Common Criteria EAL4+, NIAP NDPP,…;
…(other from US IT Infrastructure Regulatory Framework)
?

As we all may see Netgate show on official web site the fact of using of TNSR in U.S. Army Cyber School , so I more than sure, that this collaboration may not possible if TNSR have no particular sertificates.

I sure the detailed answer on this question would be increasing overall reputation of Netgate products (both hardware and software) for existed and future’s customers.

Thank You a lot for great products and reliable prices!

Sergei_Shablovsky

Up

Gertjan

@Sergei_Shablovsky said in Which official valuable certificates pfSense+, TNSR and Netgate-branded hardware already has?:

As we all may see Netgate show on official web site the fact of using of TNSR in U.S. Army Cyber School , so I more than sure, that this collaboration may not possible if TNSR have no particular sertificates.

What does that page really show ?
Or what do I - you - see looking at that page ?

An army cyber school , yeah, right, they 'use' everything available, everything they can find out there to study and train with. As "TNSR" and others, can be found there, use by others. So they better know how its works first.

Do they use it for their own infrastructure (not for school tech training) ? If the US Army actually uses it, then that info would be "classified" for sure.

And just a though : It would be nice to create a product and having the "fortune 500" telling publicly that they use "your product". Now that would be a nice publicity.
Now, think again : when you do business with entities like 'the army' you probably have to sign some paper first. Let's call it the fine print. So, call in a load of lawyers first.
Then, when these guys are done, the accountant drops in and asks one question : "Great, nice contract. But what happens if something goes wrong ?".

It's nice to be certified, have all the medals, all the papers. Getting them, well, maybe, when Netgate goes Wallstreet ?

The day Netgate becomes certified all over the place, places like this forum, pfSense packages, the open source concept etc etc will be gone fore good.
Btw : I'm always hoping to be wrong of course ;)

stephenw10

Yup. The cost of getting most of those is huge. It would have to be recouped somewhere.