@@ -380,8 +380,6 @@ The management server typically maintains configuration of the whole network and
## 4.3 Operational Environment
<mark>Editor’s Note: This clause should describe the conditions under which products of a particular type in the category are used as well as detailing possible systems in which they are integrated, including network context, integration environment, and physical surroundings, including the external conditions affecting RDPS.</mark>
### 4.3.1 General description
In many cases products get deployed in environments which allow risk transfer as security functions are handled by the operational environment. Such examples might include updates managed through a package manager or application store, or where the denial-of-service protections and package filtering through an external firefall.
@@ -438,7 +436,7 @@ VPN products often include or are used in concert with:
### 4.3.4 Connectivity aspects
The main purpose of a VPN is to connect different endpoints together through a secure tunnel. To do so many different connections have to be established, such as connectivity with the manufacturer's RDPS to retrieve credentials, connectivity to the VPN server to establish a secure tunnel, but also routing packages from the endpoint or through the endpoint in case the VPN client is deployed to route network traffics from a whole private network. All these connectivity aspects come with dedicated risks which have to be mitigated.
The main purpose of a VPN is to connect different endpoints together through a secure tunnel. To do so many different connections have to be established, such as connectivity with the manufacturer's RDPS to retrieve credentials, connectivity to the VPN server to establish a secure tunnel, but also routing packages from the endpoint or through the endpoint in case the VPN client is deployed to route network traffics from a whole private network. All these connectivity aspects come with specific risks which are mitigated by the application of cybersecurity controls such as those found in [clause 5](#technical-requirements-for-products).
