Certification Overview

As digital transformation accelerates, cybersecurity has become a lifeline of national strategy and social operation. Network critical equipment and specialized network security products are core components of digital infrastructure, and their security directly affects the stable operation of critical information infrastructure. To regulate market access and strengthen security protection, China has implemented the certification regime for network critical equipment and specialized network security products (the “network security product certification”). It serves as the passport for compliant operations and user trust.

Under Article 23 of the Cybersecurity Law, network critical equipment and specialized network security products must undergo security certification against the mandatory requirements of national standards. Routers, switches, firewalls, intrusion detection systems, and other products on the national catalogue must pass national certification before they can be sold or procured. Through technical testing, security assessment, and continuous supervision, the certification systematically verifies product security across data encryption, vulnerability protection, and attack resistance, ensuring compliance with national security standards across the full lifecycle from design and development to delivery.

Product Scope

(1) Network critical equipment

• Routers
• Switches
• Rack-mount servers
• Programmable logic controllers (PLC)

(2) Specialized network security products

• Data backup and recovery products
• Firewalls
• Intrusion detection systems (IDS)
• Intrusion prevention systems (IPS)
• Network and terminal isolation products
• Anti-spam products
• Network security audit products
• Network vulnerability scanning products
• Secure database systems
• Website data recovery products
• Virtual private network (VPN) products
• Anti-virus gateways
• Unified threat management (UTM) products
• Anti-virus products
• Secure operating systems
• Secure network storage
• Public key infrastructure (PKI)
• Network security situational awareness products
• Information system security management platforms
• Network traffic control products
• Load balancing products
• Information filtering products
• Anti-DDoS products
• Terminal access control products
• USB removable media management systems
• File encryption products
• Data loss prevention products
• Data destruction software
• Security configuration check products
• Operations security management products
• Log analysis products
• Identity authentication products
• Endpoint security monitoring products
• Electronic document security management products

Certification Process

Application → Type testing → Evaluation of certification results → Follow-up supervision

⚠️ Note: the certificate is normally valid for 5 years, with supervision continuing for 5 years after certification.

Our Advantages

For network core device security certification we have extensive hands-on experience and are familiar with the security testing standards and common rejection reasons for network core devices. We provide professional support from technical documentation through formal application to post-certificate maintenance. Our laboratory is staffed with a dedicated engineering team that pre-tests samples before formal submission, identifying and resolving issues early so samples enter laboratory testing in the best possible condition. This reduces test failure rates and helps clients shorten the certification cycle at the lowest time cost and compliance risk.