VPN solutions with BSI approval for VS-NfD
NCP VS GovNet solutions are approved by the German Federal Office for Information Security (BSI) for the secure processing and transmission of VS-NfD classified information. They enable public authorities, government organizations, and companies handling classified information to securely connect Windows workstations to protected networks from the office or while working remotely.
BSI Approval for the Following Classification Levels:
- VS-NfD
- RESTREINT UE/EU RESTRICTED
- NATO RESTRICTED
NCP has also been designated a “Qualified Manufacturer” by the BSI. This designation reflects NCP's long-standing expertise in developing software for security-critical environments and its commitment to meeting demanding security requirements.
What is VPN software with BSI approval for VS-NfD?
Public authorities, government organizations, and companies handling classified information face specific challenges when providing access to sensitive data and transmitting information securely. They require solutions that meet the technical, organizational, and regulatory requirements associated with classified information.
NCP VS GovNet was developed specifically for these environments. The BSI-approved VPN software provides protected communication and secure access to networks in which VS-NfD classified information is processed or transmitted.
NCP VS GovNet consists of two coordinated components:
NCP VS GovNet solution
- Product name: NCP VS GovNet Solutions
- Product type: Secure remote-access and VPN software
- Use cases: Secure processing and transmission of VS-NfD classified information
- Suitable for: Public authorities, government organizations, and companies subject to classified information security requirements
Why choose NCP VS GovNet?
NCP VS GovNet provides public authorities, government organizations, and companies handling classified information with a highly secure, BSI-approved VPN solution. Developed entirely in Germany, the software integrates flexibly with existing IT infrastructures and combines secure communication with centralized administration and scalable deployment.
NCP VS GovNet Connector
NCP VS GovNet Connector is a BSI-approved VPN client for Windows end devices. It is approved for VS-NfD, RESTREINT UE / EU RESTRICTED, and NATO RESTRICTED. Based on the IPsec standard, the client establishes highly secure connections to NCP VS GovNet Server.
Users and IT administrators benefit from strong security, straightforward operation, and comprehensive functionality.
- BSI approval (VS-NfD, RESTREINT UE/EU RESTRICTED, and NATO RESTRICTED)
- Integrity service for enhanced security
- Centralized permissions and configuration management
- Strong authentication
- Friendly Net Detection
- Secure Hotspot Logon
- Pre-Logon Access Provider
- NCP Path Finder Technology (IPsec/HTTPS fallback)
- Quality of Service support
- Wi-Fi and cellular network support
- Use on end devices with a standard Windows operating system
- High performance and scalability
- lexible licensing models
Standardized interfaces allow the VPN client to be combined with approved authentication hardware and security software, such as smart card readers and disk encryption solutions. The signature verification based on Elliptic Curve Cryptography (ECC) required by the BSI is also supported.
Seamless Roaming gives Windows users secure access to central network resources while moving between locations and network connections. Automatic switching between available connection methods supports reliable Always-On operation and can maintain active application sessions during brief interruptions or changes of network.
Custom Branding also allows organizations to add their logo and support information to the VPN client interface.
For complete feature and technical information, see the relevant product data sheet.
NCP VS GovNet Server
NCP VS GovNet Server is a BSI-approved VPN gateway for VS-NfD and the secure counterpart to NCP VS GovNet Connector. The software can be installed as a complete image on a physical server or operated as a virtual server.
- BSI approval for VS-NfD
- Supports elliptic curve cryptography (ECC)
- BSI-certified DRG.4-class random number generator
- Integrated IP routing and firewall functionality
- NCP Path Finder Technology (IPsec/HTTPS fallback)
- Automatic tunnel redirection
- Multi-tenancy
- Multiprocessor support and scalable operation
- Virtual server deployment
- Hardened Linux system; Privilege separation for the server application
Additional Information:
User management can be integrated flexibly with back-end systems such as RADIUS, LDAP, and Microsoft Active Directory. Users can also be managed directly on the VPN gateway.
A hardened Linux-based operating system and privilege separation help protect the underlying server environment. Elliptic curve certificates support highly secure communication, while a BSI-approved DRG.4-class random number generator provides the high-quality random numbers required for cryptographic operations.
For complete feature and technical information, see the relevant product data sheet.
A hybrid model for classified and enterprise environments
Critical infrastructure operators, public authorities, and companies often use both VS-NfD classified workstations and standard enterprise workstations within a shared IT infrastructure.
NCP’s hybrid model allows VS-NfD classified and standard enterprise workstations to be administered through a shared central management environment. This reduces administrative effort, makes better use of existing resources, and supports an efficient and cost-effective IT infrastructure.
Centralized management
Strong security
A consistent client interface
Support for classified information security requirements
Management and support from a single provider
Efficient use of existing resources
Streamlined administrative workflows
Cost-effective licensing
The Next Steps
Are you interested in centrally managing your remote access workstations and simplifying administrative processes?
We provide expert advice and support during the planning phase, along with tailored assistance when integrating the solution into your existing infrastructure. Our team offers technical support throughout the entire process, right up to the full deployment of your NCP VS GovNet environment.
Frequently asked questions
Here you will find concise information on the key aspects of our BSI-approved VPN solutions for VS-NfD.
A BSI-approved VPN for VS-NfD allows information with this classification to be transmitted and processed through protected network connections. Public authorities and companies handling classified information must meet particularly demanding requirements for confidentiality, integrity, authentication, and access control. A suitable VS-NfD VPN solution must therefore provide more than technically secure encryption. It must also hold the approvals required for its intended use and support the relevant classified information protection requirements.
The NCP VS GovNet Connector is approved by the BSI for VS-NfD, RESTREINT UE / EU RESTRICTED, and NATO RESTRICTED. NCP VS GovNet Server is approved by the BSI for processing and transmitting VS-NfD classified information.
A BSI-approved VPN provides an essential technical foundation for secure remote access to government and public-sector IT environments when information requiring the relevant level of protection is transmitted. The requirements extend beyond encryption. Important factors include the overall security architecture, strong authentication, centralized administration, and compliance with the requirements that apply to the specific deployment.
The solution consists of an integrated deployment comprising the NCP VS GovNet Connector and the NCP VS GovNet Server. The NCP VS GovNet Connector is the VPN client for Windows devices. It establishes a secure connection to the NCP VS GovNet Server. The NCP VS GovNet Server is the highly secure central VPN gateway for communications involving VS-NfD classified information. Both components are designed for environments handling classified information and have the relevant BSI approvals.
Yes. NCP offers a hybrid model that allows VS-NfD workstations and standard enterprise workstations to be managed through a shared centralized management environment.
A VPN with BSI approval for VS-NfD is particularly suitable for public authorities, government organizations, public-sector bodies, and companies that handle classified information and require appropriately protected communication channels.
NCP VS GovNet solutions are developed at NCP’s headquarters in Nuremberg, Germany. Keeping development and security expertise in Germany supports greater digital sovereignty and control over security-critical technologies. NCP has also been designated a “Qualified Manufacturer” by the BSI.
Do you have questions?
Our team will be happy to advise you personally.
Dombuehler Str. 2, 90449 Nuremberg
+49 911 9968 333
sales@ncp-e.com