Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Understanding the 12.1X46-D20 Common Criteria Evaluated Configuration

    This document describes the steps required to duplicate the configuration of the device running Junos OS when the device is evaluated. This is referred to as the evaluated configuration. The following list describes the standards to which the device has been evaluated:

    • Security Requirements for Network Devices, Version 1.1, 08 June, 2012 (NDPP)
    • Security Requirements for Network Devices Errata #2, 13 January, 2013
    • Network Device Protection Profile (NDPP) Stateful Traffic Filter Firewall Extended Package (FWEP), Version 1.0, 19 December, 2011 (FWEP)
    • Network Device Protection Profile (NDPP) VPN Gateway Extended Package (VPNEP), Version 1.1, 12 April 2013 (VPNEP)
    • Security Requirements for Network Devices, Version 1.1, 08 June 2012 (NDPP)

    These documents are available at

    Note: The Junos evaluated version is Junos FIPS, version 12.1X46-D20.

    Understanding Common Criteria

    Common Criteria for information technology is an international agreement signed by 28 countries that permits the evaluation of security products against a common set of standards. In the Common Criteria Recognition Arrangement (CCRA) at, the participants agree to mutually recognize evaluations of products performed in other countries. All evaluations are performed using a common methodology for information technology security evaluation.

    For more information on Common Criteria, see

    Supported Platforms

    For the features described in this document, the following platforms are supported:

    • The NDPP, FWEP, and VPNEP apply to:
      • SRX100, SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 devices.
      • SRX5400, SRX5600, and SRX5800 with SPC-4-15-320
      • LN1000 and LN2600 (same CPU and Crypto processor as SRX650)
    • The NDPP and FWEP apply to:
      • SRX1400, SRX3400, and SRX3600 devices
      • SRX5400, SRX5600, and SRX5800 devices with SPC-2-10-40

    Modified: 2015-01-15