@@ -85,18 +85,20 @@ Further information on guidance for the application of the present document is p
The present document specifies technical requirements and corresponding assessment criteria for Virtual Private Networks related to cybersecurity. The products with digital elements in scope, thereafter "VPNs":
* are specified within the "technical description" of the "category of product" number "5" by the Commission Implementing Regulation (EU) 2025/2392 [\[i.2\]](#_ref_i.2) as: "Products with digital elements that establish an encrypted logical tunnel that is constructed from the system resources of a physical or virtual network."
* are only convered within the product context described in clause 4.
* are only convered within the product context described in clause 4 and the text of this clause.
In particular, the present document specifies technical characteristics and methods of assessment for:
1. Software that operates as a VPN end-point
1. Software that operates as a VPN client or end-point
2. Software that operates as a node within a mesh VPN network
3. Software that operates as a VPN server
4. Remote data processing, specifically VPN server software performing the logical server role, and associated software used for such VPN products
The present document covers those products to demonstrate compliance with essential cybersecurity requirements in the Regulation (EU) 2024/2847 [\[i.1\]](#_ref_i.1) Annex I Part I under the conditions identified in annex [A](A).
VPNs intended for use in the industrial OT (Operational Technology) domain are excluded from the scope of the present document, see prEN 50770 series [\[i.x\]](#_ref_i.x).
VPN hardware or appliances, and control mechanisms for mesh VPNs are excluded from the present document.
VPNs intended for use in the industrial OT (Operational Technology) domain are excluded from the scope of the present document, see prEN 50770 series [\[i.8\]](#_ref_i.8).
