In the case of firewalls, we attempt to discover whether or not they truly repel attacks while providing core firewalling functionality. Government schemes require a time-consuming, complete evaluation of the product through a lengthy review of both design documentation and vendor development and facility processes. And depending on the level of trust sought by the product under evaluation, sometimes a review of actual code is warranted. ICSA testing can be performed in a much shorter period of time than most government testing schemes. Conversely, ICSA testing cycles are considerably longer than those of the government schemes since government schemes focus so much of their time reviewing documentation about the product rather than actually testing it.
ICSA testing is much less expensive than most government testing programs.
It is therefore equally important to both select a quality product, and to install and configure it properly. ICSA certification is designed to provide some level of assurance to end users that the ICSA certified firewall products they select can minimally provide a base level of security as defined in the criteria. For more information on the nature of firewalls as well as how to choose a firewall, register for and obtain our Firewall Buyer's Guide.