防火墙、入侵检测和防御系统
监测与限制网络流量、发现并主动阻断入侵的产品。
类别解释
Firewalls, intrusion detection and prevention systems
防火墙通过监测并限制进出已连接网络的数据通信流量，保护该网络或系统免遭未经授权访问，包括网络防火墙与应用防火墙（如 Web 应用防火墙、过滤器）以及反垃圾邮件网关。入侵检测系统监测进入网络环境后的流量是否存在可疑活动，并检测或识别对已连接网络或系统的入侵是否已被尝试、正在发生或已经发生，包括基于网络和基于主机的实现。入侵防御系统由入侵检测能力构成，并能够主动响应对网络的入侵。
English
Firewalls protect a connected network or system from unauthorised access by monitoring and restricting data communication traffic, and include network firewalls, application firewalls such as web application firewalls or filters, and anti-spam gateways. Intrusion detection systems monitor traffic after it enters the network environment and detect whether intrusions have been attempted, are ongoing or have occurred, including network-based and host-based implementations. Intrusion prevention systems build on detection and can actively respond to intrusions.
CRA 附件三 II 类，技术描述见实施条例 (EU) 2025/2392 附件一第 1–4 项（Class II 表）
Class II of Annex III to the CRA, with technical descriptions in the Class II table of Annex I to Implementing Regulation (EU) 2025/2392
必须采用模块 B+C 或模块 H，由公告机构对产品设计或质量体系开展第三方合格评定。
Module B+C or Module H is mandatory, with a notified body assessing the product design or the quality management system.
重要产品 · II 类的主要义务
满足该类别的更高安全强度要求，产品设计需经公告机构审查。
取得欧盟型式检验证书（模块 B+C）或经质量体系评估（模块 H）后方可加贴 CE 标识。
重大修改须重新评估，并按要求接受公告机构的定期审核。
English
- Meet the higher security level of the category; the design is assessed by a notified body.
- Affix the CE marking only after an EU-type examination certificate (Module B+C) or quality system assessment (Module H).
- Substantial modifications require re-assessment, and periodic audits by the notified body apply.