COMMUNICATIONS SECURITY ESTABLISHMENT Certificate of Product Evaluation Fortinet FortiWeb 5.6 Network and Network related Devices and Systems Fortinet Inc. This is to certify that the named product has been evaluated under the terms and conditions of the Canadian Common Criteria Scheme and complies with the requirements for Common Criteria Recognition Agreement (CCRA). Conformance Claim: collaborative Protection Profile for Network Devices Version 1.0 CC Evaluation Facility: EWA-Canada Date Issued: 5 December 2017 The IT product identified in this certificate has been evaluated at an approved evaluation facility established under the Canadian Common Criteria Scheme using the Common Methodology for IT Security Evaluation, Version 3.1 Revision 4, for conformance to the Common Criteria for IT Security Evaluation, Version 3.1 Revision 4. This certificate applies only to the specific version and release of the product in its evaluated configuration and in conjunction with the complete certification report. The evaluation has been conducted in accordance with the provisions of the Canadian Common Criteria Scheme and the conclusions of the evaluation facility in the evaluation report are consistent with the evidence adduced. This certificate is not an endorsement of the IT product by CSE or by any other organization that recognizes or gives effect to this certificate, and no warranty of the IT product by CSE or by any other organization that recognizes or gives effect to this certificate, is expressed or implied. ORIGINAL SIGNED 383-4-425 Manager COTS Assurance Programs