Export Compliance

Sourcefire's hardware and software are subject to the export control laws of the United States. Depending on the location and/or distribution of Sourcefire's products, they may also be subject to the export control laws of other jurisdictions. Compliance with export controls is a high priority at Sourcefire, and we provide this information to aid our channel partners and end customers in their compliance efforts. We note that this information is merely provided as a resource; our partners and end customers are responsible for the export, re-export, transfer, and/or use of Sourcefire products in accordance with U.S. law and the laws of other relevant jurisdictions. The information contained on this page is subject to change without notice.

Under the Export Administration Regulations (EAR), as administered by the Bureau of Industry & Security (BIS) of the U.S. Department of Commerce, exports, re-exports, and/or transfers of Sourcefire's products are subject to various export controls due to their nature as information security products that employ encryption. Export Classification Control Numbers (ECCNs) for Sourcefire's products are detailed in the chart below.

Sourcefire Products

Sourcefire's products are eligible for export from the U.S. to most destinations under License Exception ENC. However, Sourcefire's products may not be exported or reexported to Cuba, Iran, North Korea, Sudan, or Syria. In addition, Sourcefire's products cannot be used in restricted nuclear weapons, chemical/biological weapons, and missile-related activities. Finally, Sourcefire products may not be exported, reexported, or otherwise diverted to certain "restricted parties" in the U.S. and abroad designated by the U.S. Government. Export compliance screening can assist parties in complying with these restrictions.

U.S. export laws apply to Sourcefire products extraterritorially, meaning they apply outside the U.S., even if the products are manufactured outside the U.S. and regardless of the location of the products or who is handling them. The U.S. government has sanctioned parties within and outside the U.S. that were found to violate these laws. Such sanctions have involved fines and inclusion on "restricted party" lists.

In addition to U.S. export and re-export controls, Sourcefire products are also subject to European Union (EU) export controls if they are exported from an EU location to a destination outside the EU. Parties exporting Sourcefire products from the EU should obtain proper export licenses as required under EU rules (Council Regulation (EC) No. 428/2009) and Member State laws. Sourcefire products exported from Malaysia are subject to Malaysian export controls under the Strategic Trade Act of 2010. Similar requirements may apply to Sourcefire products exported from other countries, depending on the jurisdiction in question. Encryption products are also subject to import restrictions in certain countries, including prior notification and licensing requirements.

We encourage all parties exporting or re-exporting Sourcefire products to consult the EAR, contact BIS, and/or obtain appropriate legal advice related to their transactions. For more information regarding exports from or imports into the EU or other jurisdictions, it may be advisable to obtain legal guidance and/or contact the administrative body responsible for export and import requirements in the jurisdiction in question.

Questions

For more information on U.S. export controls, BIS is a good place to start:

• Home page: http://www.bis.doc.gov
  • Office of Exporter Services: 1-202-482-4811 in Washington, DC or 1-949-660-0144 in Newport Beach, CA

If you have any questions for Sourcefire about export control compliance, please contact international.trade.compliance@sourcefire.com or call 1-443-430-7033.