BIG-IP and BIG-IP SSL Orchestrator: Pioneers in Achieving Common Criteria STIP Certification

F5 Ecosystem | May 22, 2024

The digital landscape is fraught with ever-evolving threats, making robust network security solutions—particularly those providing dynamic SSL/TLS inspection—more critical than ever. It’s estimated that nearly 90% of all Internet traffic is encrypted with SSL/TLS protocols, within which malware payloads, phishing scams, and other attacks are often hidden.

In recognition of this need, F5 BIG-IP 16.1.3.1, including BIG-IP SSL Orchestrator, has achieved a monumental milestone by receiving the Common Criteria Security Target Implementation Plan (STIP) Certificate. This prestigious certification is a testament to the products’ commitment to maintaining the highest security standards.

A seal of trust and excellence

The Common Criteria certification is an internationally recognized set of guidelines for evaluating the security features and capabilities of IT products. It is widely recognized and accepted by governments, organizations, and enterprises globally because it provides an objective evaluation to validate that the security attributes of a product meet specified requirements and high levels of assurance.

The process to achieve Common Criteria certification is rigorous and thorough, involving detailed documentation, such as the STIP, which outlines the product's security features and measures taken to implement these features effectively.

The Common Criteria STIP Certificate awarded to BIG-IP and BIG-IP SSL Orchestrator isn’t just a win for F5—it’s a win for the network security industry.

By meeting the requirements necessary to obtain the Common Criteria STIP Certificate, BIG-IP and BIG-IP SSL Orchestrator demonstrate that they can stand up to the scrutiny of independent security experts. This is not just a badge of honor but a signal to organizations that the products they’re investing in have been through an exhaustive vetting process.

“Achieving the Common Criteria certification for BIG-IP 16.1.3.1, inclusive of BIG-IP SSL Orchestrator, is a pivotal moment for F5,” says Joe Scherer, RVP, Solutions Engineering at F5. “It underscores our unwavering commitment to excellence and to providing our customers with the most secure and reliable network security solutions available in the market.”

Why is this certification important?

For organizations, this certification provides several assurances, such as:

  • Enhanced security. The Common Criteria certification ensures that BIG-IP 16.1.3.1, with BIG-IP SSL Orchestrator, has been evaluated for potential vulnerabilities and that its security features are well-designed and implemented to protect against a wide array of cyber threats, including advanced ransomware attacks that often gain access to an organization’s apps and network via encrypted payloads.
  • Regulatory compliance. Many industries are governed by regulations that require or highly prefer the use of certified products. F5’s certification means that BIG-IP 16.1.3.1 and BIG-IP SSL Orchestrator satisfy critical compliance mandates, allowing organizations to meet legal and policy obligations more easily.
  • Customer confidence. Organizations can deploy BIG-IP 16.1.3.1 with BIG-IP SSL Orchestrator with enhanced trust and confidence, knowing that each product has met the international gold standard for security. This peace of mind is invaluable in a landscape where trust is paramount.

“In a world where encrypted threats are increasingly common, this certification is a beacon of assurance for our clients,” explains Scherer. “F5 customers can rest assured that their networks and apps are fortified against sophisticated cyber threats with BIG-IP solutions that have been rigorously tested and certified to the highest standards.”

What this means for network security

The achievement of the Common Criteria STIP Certificate by BIG-IP 16.1.3.1, including BIG-IP SSL Orchestrator, is not just a win for F5—it’s a win for the network security industry. It raises the bar for what organizations should expect from their security solutions and pushes other vendors to strive for the same level of excellence.

Network security is no longer a niche concern but a foundational aspect of any modern organization. With cyber threats becoming more sophisticated, certifications like Common Criteria provide a crucial framework for evaluating and ensuring the effectiveness of security products.

Looking ahead

As the cyber threat landscape continues to evolve, it's reassuring to know that solutions like BIG-IP 16.1.3.1, including BIG-IP SSL Orchestrator, aren’t only keeping pace but are also setting and pioneering industry standards. The Common Criteria STIP certification is a clear indicator that F5 is committed to providing top-tier security solutions. It's a reminder that in the world of cybersecurity, diligence and relentless pursuit of excellence are the keys to staying ahead of threats.

Organizations looking to bolster their defenses would do well to consider solutions like BIG-IP 16.1.3.1 with BIG-IP SSL Orchestrator, which have proven their worth under the scrutiny of the Common Criteria certification process. As we continue to navigate the complexities of modern cyber threats, partnerships with trusted, certified providers will be the cornerstone of effective and resilient cybersecurity strategies.

***

Schedule a product demonstration or consult with security experts at F5 to understand how BIG-IP and BIG-IP SSL Orchestrator can fit into your security strategy today.

For additional information on the certification itself, reference the following resources:

Share

About the Author

Related Blog Posts

F5 accelerates and secures AI inference at scale with NVIDIA Cloud Partner reference architecture
F5 Ecosystem | 10/28/2025

F5 accelerates and secures AI inference at scale with NVIDIA Cloud Partner reference architecture

F5’s inclusion within the NVIDIA Cloud Partner (NCP) reference architecture enables secure, high-performance AI infrastructure that scales efficiently to support advanced AI workloads.

F5 Silverline Mitigates Record-Breaking DDoS Attacks
F5 Ecosystem | 08/26/2021

F5 Silverline Mitigates Record-Breaking DDoS Attacks

Malicious attacks are increasing in scale and complexity, threatening to overwhelm and breach the internal resources of businesses globally. Often, these attacks combine high-volume traffic with stealthy, low-and-slow, application-targeted attack techniques, powered by either automated botnets or human-driven tools.

F5 Silverline: Our Data Centers are your Data Centers
F5 Ecosystem | 06/22/2021

F5 Silverline: Our Data Centers are your Data Centers

Customers count on F5 Silverline Managed Security Services to secure their digital assets, and in order for us to deliver a highly dependable service at global scale we host our infrastructure in the most reliable and well-connected locations in the world. And when F5 needs reliable and well-connected locations, we turn to Equinix, a leading provider of digital infrastructure.

Volterra and the Power of the Distributed Cloud (Video)
F5 Ecosystem | 04/15/2021

Volterra and the Power of the Distributed Cloud (Video)

How can organizations fully harness the power of multi-cloud and edge computing? VPs Mark Weiner and James Feger join the DevCentral team for a video discussion on how F5 and Volterra can help.

Phishing Attacks Soar 220% During COVID-19 Peak as Cybercriminal Opportunism Intensifies
F5 Ecosystem | 12/08/2020

Phishing Attacks Soar 220% During COVID-19 Peak as Cybercriminal Opportunism Intensifies

David Warburton, author of the F5 Labs 2020 Phishing and Fraud Report, describes how fraudsters are adapting to the pandemic and maps out the trends ahead in this video, with summary comments.

The Internet of (Increasingly Scary) Things
F5 Ecosystem | 12/16/2015

The Internet of (Increasingly Scary) Things

There is a lot of FUD (Fear, Uncertainty, and Doubt) that gets attached to any emerging technology trend, particularly when it involves vast legions of consumers eager to participate. And while it’s easy enough to shrug off the paranoia that bots...

Deliver and Secure Every App
F5 application delivery and security solutions are built to ensure that every app and API deployed anywhere is fast, available, and secure. Learn how we can partner to deliver exceptional experiences every time.
Connect With Us