NIAP: View Technical Decision Details
NIAP/CCEVS
  NIAP  »»  Protection Profiles  »»  Technical Decisions  »»  View Details  
TD0683:  RFC 2460 to be replaced with RFC 8200

Publication Date
2022.12.02

Protection Profiles
MOD_VPNGW_v1.2

Other References
FPF_RUL_EXT.1.2, MOD_VPNGW_v1.2-SD

Issue Description

Within the PP Module VPN Gateway v1.2, under Section 5.2.5 Packet Filtering (FPF) the FPF_RUL_EXT.1.2 needs to be updated per the RFC Text. RFC 8200 obsoletes RFC 2460.  RFC 2460 should be replaced with RFC 8200

 

Resolution

In PP Module VPN Gateway v1.2, under Section 5.2.5 Packet Filtering (FPF) the SFR,  FPF_RUL_EXT.1.2, needs to be updated. The following portion is replaced with underline being additions and strikethroughs indicative of removal. 

  • IPv6 (RFC 2460  8200 )
    • source address
    • destination address
    • next header (protocol)

The change is also reflected in the Supporting Document, MOD_VPNGW_v1.2-SD, Section 2.2.4 Packet Filtering (FPF) in the following sections:

TSS

  • IPv6 (RFC  2460  8200 )
    • source address
    • destination address
    • next header (protocol)

Guidance

  • IPv6 (RFC  2460  8200 )
    • source address
    • destination address
    • next header (protocol)
Justification

See issue description

 
 
Site Map              Contact Us              Home