Export Compliance

Sourcefire's hardware and software are subject to the export control laws of the United States. Depending on the location and/or distribution of Sourcefire's products, they may also be subject to the export control laws of other jurisdictions. Compliance with export controls is a high priority at Sourcefire, and we provide this information to aid our channel partners and end customers in their compliance efforts. We note that this information is merely provided as a resource; our partners and end customers are responsible for the export, re-export, transfer, and/or use of Sourcefire products in accordance with U.S. law and the laws of other relevant jurisdictions. The information contained on this page is subject to change without notice.

Under the Export Administration Regulations (EAR), as administered by the Bureau of Industry & Security (BIS) of the U.S. Department of Commerce, exports, re-exports, and/or transfers of Sourcefire's products are subject to various export controls due to their nature as information security products that employ encryption. Export Classification Control Numbers (ECCNs) for Sourcefire's products are detailed in the chart below.

Sourcefire Products

Product US Export Code (Schedule B) ECCN Unrestricted / Restricted License Exception and EAR Reference CCATS # Date (mm/dd/yy)
3D500, 3D1000, 3D2000, 3D2100, 3D2500, 3D3500, 3D4500, 3D6500, 3D9900 8517.62.0050 5A002.a.1 Unrestricted ENC 740.17 (a) and (b)(3) G024096 02/16/02
3D3800, 3D5800, 3D9800 8517.62.0050 5A002.a.1 Unrestricted ENC 740.17 (a) and (b)(3) G042567 08/10/05
3D7010, 3D7020, 3D7030, 3D7110, 3D7115, 3D7120, 3D7125, 3D8120, 3D8130, 3D8140, 3D8250 3D8260, 3D8270, 3D8290 8517.62.0050 5A002.a.1 Unrestricted ENC 740.17 (a) and (b)(1) G137073 04/01/11
Defense Centers DC500, DC1000, DC3000 8517.62.0050 5A002.a.1 Unrestricted ENC 740.17 (a) and (b)(3) G024097 02/16/02
Defense Centers DC750, DC1500, DC3500 8517.62.0050 5A002.a.1 Unrestricted ENC 740.17 (a) and (b)(1) G137074 04/01/11
SSL Appliance 8517.62.0050 5A002.a.1 Unrestricted ENC 740.17 (a) and (b)(3) G059038 12/01/07
NGFW (Next Generation Firewall) without VPN N/A 5D002.c.1 Unrestricted ENC 740.17 (a) and (b)(1) G148954 05/20/13
NGFW (Next Generation Firewall) with VPN (v5.2 and higher) N/A 5D002.c.1 Restricted ENC 740.17 (a) and (b)(2) G148954 05/20/13
VPN license N/A 5D002.c.1 Restricted ENC 740.17 (a) and (b)(2) G148954 05/20/13
Virtual Defense Center N/A 5D002.c.1 Unrestricted ENC 740.17 (a) and (b)(3) G077443 05/08/10
Virtual 3D Sensor N/A 5D002.c.1 Unrestricted ENC 740.17 (a) and (b)(3) G077444 05/08/10
Qualys Connector N/A 5D002.c.1 Unrestricted ENC 740.17 (a) and (b)(1) G401395 09/28/10
Immunet N/A 5D992 Unrestricted NLR Self-classified 06/03/11
FireAMP N/A 5D002.c.1 Unrestricted ENC 740.17 (a) and (b)(1) Self-classified 11/17/11
AMP for FirePOWER N/A 5D002.c.1 Unrestricted ENC 740.17 (a) and (b)(1) Self-classified 04/25/13
AMP Appliance 8517.62.0050 5A002.a.1 Unrestricted ENC 740.17 (a) and (b)(1) Self-classified 04/25/13
FireAMP for Android N/A 5D992 Unrestricted NLR Self-classified 06/28/12
Network Modules: NM-C4-0, NM-FX4-0, NM-SR2-0, NM-LR2-0, and SF-3D-CLST-MOD-0 8517.62.0050 None (EAR99) N/A N/A N/A N/A
3D-PB-Rack-Kit 8473.30.0002 None (EAR99) N/A N/A N/A N/A

 

Sourcefire's products are eligible for export from the U.S. to most destinations under License Exception ENC. However, Sourcefire's products may not be exported or reexported to Cuba, Iran, North Korea, Sudan, or Syria. In addition, Sourcefire's products cannot be used in restricted nuclear weapons, chemical/biological weapons, and missile-related activities. Finally, Sourcefire products may not be exported, reexported, or otherwise diverted to certain "restricted parties" in the U.S. and abroad designated by the U.S. Government. Export compliance screening can assist parties in complying with these restrictions.

U.S. export laws apply to Sourcefire products extraterritorially, meaning they apply outside the U.S., even if the products are manufactured outside the U.S. and regardless of the location of the products or who is handling them. The U.S. government has sanctioned parties within and outside the U.S. that were found to violate these laws. Such sanctions have involved fines and inclusion on "restricted party" lists.

In addition to U.S. export and re-export controls, Sourcefire products are also subject to European Union (EU) export controls if they are exported from an EU location to a destination outside the EU. Parties exporting Sourcefire products from the EU should obtain proper export licenses as required under EU rules (Council Regulation (EC) No. 428/2009) and Member State laws. Sourcefire products exported from Malaysia are subject to Malaysian export controls under the Strategic Trade Act of 2010. Similar requirements may apply to Sourcefire products exported from other countries, depending on the jurisdiction in question. Encryption products are also subject to import restrictions in certain countries, including prior notification and licensing requirements.

We encourage all parties exporting or re-exporting Sourcefire products to consult the EAR, contact BIS, and/or obtain appropriate legal advice related to their transactions. For more information regarding exports from or imports into the EU or other jurisdictions, it may be advisable to obtain legal guidance and/or contact the administrative body responsible for export and import requirements in the jurisdiction in question.

Questions

For more information on U.S. export controls, BIS is a good place to start:

  • Home page: http://www.bis.doc.gov
    • Office of Exporter Services: 1-202-482-4811 in Washington, DC or 1-949-660-0144 in Newport Beach, CA

If you have any questions for Sourcefire about export control compliance, please contact sourcefire_export@cisco.com or call 1-443-430-7033.

COLLAPSE FOOTER