ETSI EN 304 620 (Part 1)

Virtual private networks

INTERIM DRAFT (v0.2.0, 2026-07-14) — draft EN produced by ETSI TC CYBER, submitted for the combined Public Enquiry and Vote phase (SRdAP) and subject to change before publication. The committed sources publish clauses 1-4 and Annexes A/B only: the normative clauses 5, 6, K and R are unresolved includes with no text. Not cited in the Official Journal: conformance confers NO presumption of conformity today.

ETSI has published interim draft text for this standard — https://labs.etsi.org/rep/stan4cra/en-304-620-1, retrieved 2026-09-02— and its integration into a Vandorisk pack is in progress. Until the extracted pack ships, this page serves no requirement text: nothing is invented, and nothing here should be cited as the draft’s content.

It attaches to the CRA Annex III/IV item: “Products with digital elements with the function of virtual private network (VPN)”. The horizontal CRA pack keeps evaluating products in that category either way.

Part 2 is announced with no published text yet.

All tracked vertical standards are listed on the rule-pack page; the integrated packs are published in full, like EN 304 622 for SIEM.