Interesting question, James. I remember discussions about EAL here over a year ago, but hadn't heard anything since. Apparently, Astaro has partnered with another German company, Secunet, to produce an appliance with Secunet's logo on it that is upposed to go from EAL2+ to EAL4+ this year. I doubt that that box is different from standard Astaro software, so can Astaro be far behind?
Astaro is currently in the process of a Common Criteria EAL4+ evaluation. The official certification ID, issued by the German authority Bundesamt für Sicherheit in der Informationstechnik, is BSI-DSZ-CC-0696 (see also ).
Finally, on June 03, 2011, Astaro has been awarded Common Criteria certification with assurance level EAL 4+. Target of evaluation was the Astaro Security Gateway V8 Packet Filter, which is the firewall component of the UTM security solution Astaro Security Gateway.
