An encrypted gateway is a high-risk import item because it may trigger three layers of review at the same time: HS classification, network information security import licensing, and civil cryptography licensing where IP flow encryption is involved. If the commercial documents merely state “gateway”, “router” or “network appliance”, the shipment may be asked to explain functions, supplement licences, adjust HS code, lose C/O preferential duty or incur DEM/DET because compliance is handled after ETA. This article provides an E2E map for pre-shipment review: HS code, duties, C/O, specialized policies, technical dossier, customs clearance workflow and key risks to block before ETA.

QUICK FACTS

Item	Review content	Operational note
Applicable product	Physical encrypted gateway/appliance used to encrypt, secure or establish IP/VPN channels between networks, data centres, branches or project systems.	Not automatically applicable to ordinary secure routers, electronic VPN licences, firewalls, consumer modems/routers or switching-only devices without encryption functions.
Reference HS codes	Core HS codes to review include 8471.30.90 / 8471.41.90 / 8471.49.90 and 8517.62.43 / 8517.62.49 under the VPN/network security list. For civil cryptography review of IP flow security products, also cross-check 8517.62.42 / 8517.62.51 / 8517.62.53 / 8517.62.59 and other 8517 codes only where the model matches the HS code, goods description and cryptographic technical characteristics at the same time.	Final HS classification must be based on structure, ports, CPU, firmware, routing/VPN/encryption functions and actual technical documents.
Reference taxes	MFN is generally reviewed at 0%; ordinary import duty at 5%; VAT should be provisioned at 10%, with 8% reviewed only if the goods qualify under the VAT reduction policy of the relevant period.	Check the tariff schedule on the customs declaration date, C/O, origin, goods description and VAT policy status.
Key policy review	The product may require an import licence for network information security products under the VPN category and/or an import licence for civil cryptography products if it secures IP flows or encrypted data exchange.	Do not conclude “no licence required” without catalogue, datasheet, algorithm/protocol description, model and actual import purpose.
Critical dossier	Invoice, Packing List, B/L/AWB, C/O if applicable, catalogue/datasheet, model/serial list, encryption/VPN function description, ATTT/civil cryptography licences where required.	Product name, model, HS code, security function and origin must match across commercial documents, technical documents, licences and customs declaration.

Legal note: This is an operational review framework. For encrypted gateways, policy conclusion depends heavily on catalogue, datasheet, security protocols, encryption algorithms, wireless modules, goods condition and actual import purpose.

Illustration for Import Procedures for Encrypted Gateway — Illustration of the product group and document review before customs clearance.

SCOPE OF APPLICATION

This article applies only to encrypted gateway imported as a tangible complete hardware appliance. It does not automatically apply to VPN appliance, secure router, firewall, UTM, ordinary switch/gateway, software licence delivered by email, subscription/SaaS or standalone modules not forming a complete appliance.

Applicable to encrypted channel gateways

Devices that establish VPN tunnels, encrypt IP flows, authenticate connections and secure data transmitted over IP networks.

No group-wide conclusion

VPN appliance, secure router and encrypted gateway may share the same menu group but may differ in configuration, algorithms, licences and HS classification.

Technical dossier is decisive

Review catalogue, datasheet, model, firmware, IPSec/TLS/SSL/L2TP protocols, Wi‑Fi/4G/5G modules and actual import purpose.

CLASSIFICATION & PRODUCT IDENTIFICATION

An encrypted gateway must be identified by its technical nature, not by trade name. Key details include CPU/SoC, Ethernet/SFP ports, VPN protocols, encryption algorithms, throughput, tunnel capacity, routing/firewall functions, wireless modules, power supply, accessories and goods condition.

Checkpoint	Documents to cross-check	Risk if wrongly described	Suggested goods description
Main function	Catalogue, datasheet, user manual	Generic “gateway” description may miss ATTT/civil cryptography licensing	Encrypted gateway for secure IP/VPN communication, model…, brand…, new 100%
Protocols and algorithms	Security whitepaper, admin guide, datasheet	Unable to determine whether it is IP flow security or VPN product	State IPSec/TLS VPN, encrypted IP flow, secure gateway if supported by documents
Hardware structure	Datasheet, port photos, BOM if available	Wrong classification between Chapter 8471 and 8517	Gateway/router/appliance with CPU and LAN/WAN/SFP ports according to model
Wireless connectivity	Datasheet, module certificates, FCC/CE if any	May trigger QCVN, conformity declaration/certification and quality inspection	State clearly whether Wi‑Fi/Bluetooth/4G/5G is present for the exact model
Goods condition	Invoice, packing list, serial list, RMA/warranty note	Wrong policy if used/refurbished/warranty goods	New 100% or refurbished/RMA must be consistently declared and supported

HS CODE – DUTIES – C/O

HS code for encrypted gateway cannot be finalized based on name alone. Determine whether the product is an automatic data processing machine/appliance under heading 84.71 or data transmission/reception gateway/router under heading 85.17. If the device uses secure VPN technology or encrypts transmitted data, network information security and civil cryptography lists must be reviewed together.

Reference HS code	Application condition	Risk if misapplied	Documents to cross-check
8517.62.43	Gateway/router, controller, adaptor or similar device designed for connection to ADP machines of heading 84.71.	Wrong description of transmission/reception equipment may lead to HS or policy adjustment.	Catalogue, datasheet, ports, system diagram, gateway/router functions.
8517.62.49	Other data transmission/reception device under 8517.62 when 8517.62.43 conditions are not met.	May be confused with dedicated router/gateway or wireless transmission equipment.	Datasheet, manual, port photos, manufacturer documents.
8471.30.90 / 8471.41.90 / 8471.49.90	Device structured as an ADP machine/appliance with CPU, memory, OS/firmware and secure data processing functions.	Wrong heading may affect licensing, duties, C/O and customs explanation.	Hardware specs, CPU/RAM/storage, OS/firmware, model list.
8517.62.42 / 8517.62.51 / 8517.62.53 / 8517.62.59	Review only under the civil cryptography/IP flow security branch or where the actual model is a concentrator, wireless LAN device, other radio transmission device or other combined transmission/reception equipment.	Do not use by default for a wired encrypted gateway unless the HS code, goods description and cryptographic technical characteristics all match the listed scope.	Hardware datasheet, radio specs if any, security whitepaper, algorithm/protocol description and manufacturer documents.

Proposed duty table

Tax item	Reference rate	Application condition	Control note
MFN import duty	0% reference	Where the final HS code and tariff schedule on declaration date show 0%.	Verify under the current tariff schedule.
Ordinary import duty	5% reference	Where preferential/special preferential treatment is not available.	Check the ordinary tariff decision and actual HS code.
VAT	Provision at 10%; review 8% only if the VAT reduction policy applies	Depends on VAT policy at import time and exclusion list.	Do not hard-code 8% without checking exclusions.
Special preferential duty under C/O	May be 0% or FTA preferential rate	Only where C/O is valid, correct form, correct HS, correct origin and satisfies origin rules.	Review draft C/O before ETA.

C/O checklist to review

C/O checkpoint	Common risk	Handling method
C/O form and FTA	Wrong form, wrong route or ineligible FTA treatment	Identify exporting country, FTA and form before shipment.
HS code on C/O	HS differs from declaration or goods description	Review draft C/O with invoice/catalogue before issuance.
Goods description	Too generic or inconsistent with encrypted gateway/model	Align with invoice, packing list and customs declaration.
Origin criterion	RVC/CTH/CTSH not met or lacking supporting evidence	Coordinate with shipper for origin explanation when requested.

APPLICABLE SPECIALIZED POLICIES

Goods scenario	Possible policy	Documents to check	Authority/portal if identifiable	Recommended timing	Risk note
Encrypted gateway with VPN/anti-intrusion function on transmission path	May fall under network information security product import licensing, VPN category.	Catalogue, datasheet, model, VPN function description, licence if required.	Authority: Authority of Information Security under the Ministry of Information and Communications; online filing through the MIC public service portal or National Public Service Portal where applicable.	Before ETA, ideally from PO confirmation.	Do not wait until cargo arrival because the licence may be a key clearance condition.
Device using cryptographic algorithms to secure IP flows	May fall under civil cryptography products subject to import/export licence, IP flow security products.	Algorithm/protocol information, IPSec/TLS VPN documents, model, intended use.	Government Cipher Committee; dossier may be submitted directly, by post or through the National Public Service Portal under current regulations.	Before shipment.	If both ATTT and civil cryptography apply, prepare parallel dossier strategy.
With Wi‑Fi/Bluetooth/4G/5G	May trigger ICT conformity certification/declaration and quality inspection under Circular 29/2025/TT-BKHCN and relevant QCVN.	Radio datasheet, frequency band, output power, module, test report.	Public service portal/NSW or specialized authority depending on procedure.	Before ETA.	Only where HS code and goods description fall within the list.
With adapter/charger/battery	May trigger electrical safety, labelling and battery-related dossier depending on configuration.	Power specs, adapter, battery, original label, packing list.	Relevant specialized authority if listed.	Before packing.	Accessories may alter the dossier checklist even if they do not change product nature.
Used/refurbished/RMA goods	May trigger used goods policy, valuation and purpose explanation.	Invoice, serial list, RMA/warranty note, goods condition.	Customs and specialized authority if required.	Before shipment.	Do not declare new 100% if goods are actually refurbished/RMA.
EPE/FDI/project import	Control customs regime, import purpose, exemption/incentive and asset management dossier.	Contract, PO, project documents, investment documents if needed.	Customs branch and enterprise compliance team.	Before ETA.	Mismatch of import purpose may affect customs regime and post-clearance records.

LEGAL DOCUMENTS TO REVIEW

Document group	Name/number	Issuing body	Effective/application timing	Role in the procedure	Notable article/appendix	Review note
Law	Law on Customs 2014	National Assembly	Currently applied; verify status at procedure time	Basis for customs declaration, inspection and supervision.	Customs dossier and post-clearance provisions.	Review according to actual customs regime.
Circular	Circular 10/2022/TT-BTTTT	Ministry of Information and Communications	Effective from 15 Sep 2022	List of network information security products imported under licence.	Appendix I, VPN item.	Apply only where HS and function fall within the list.
Decree	Decree 211/2025/ND-CP	Government	Effective from 09 Sep 2025	List of civil cryptography products subject to import/export licensing.	Articles 4 and 7; Appendix II, IP flow security products and corresponding HS codes.	Apply only where the HS code, goods description and cryptographic technical characteristics match simultaneously; review carefully where IPSec/TLS VPN or IP flow encryption is involved.
Circular	Circular 29/2025/TT-BKHCN	Ministry of Science and Technology	Effective from 31 Dec 2025	List of ICT/telecom group-2 products; conformity certification/declaration if applicable.	Articles 1, 3, 4 and appendices.	Only apply when HS and description are listed.
Decree	Decree 43/2017/ND-CP and amendments	Government	Check current validity	Imported goods labelling and Vietnamese supplementary label.	Label content, origin and responsible entity.	Prepare original label photos and supplementary label.
Tariff	Current import-export tariff and ordinary tariff decision	Government/Ministry of Finance	Declaration date	Determine MFN, ordinary duty and FTA preferential duty.	Final HS code and applicable tariff.	Do not use absolute rates without checking on declaration date.
VAT	Decree 174/2025/ND-CP and VAT policies by period	Government	Policy period under current documents	Review VAT at 10% or possible 8% reduction.	Excluded goods/services list.	Do not apply 8% automatically.

VIEW / DOWNLOAD ORIGINAL LEGAL DOCUMENTS

Enterprises may search legal documents by number on official legal databases, the Government portal or the issuing authority website. Enterprises should cross-check the official legal database or issuing authority website before application.

Circular 10/2022/TT-BTTTT Decree 211/2025/ND-CP Circular 29/2025/TT-BKHCN Tariff lookup

CUSTOMS CLEARANCE DOSSIER

The dossier should be locked before ETA, especially product name, model, serial, origin, technical specifications, encryption/VPN functions and HS code. These must match across commercial documents, catalogue, label, specialized dossiers and customs declaration.

Commercial documents

Commercial Invoice, Packing List, B/L or AWB, Sales Contract/PO if any, C/O where preferential duty is claimed, arrival notice, pre-alert.

Technical documents

Catalogue, datasheet, user manual, security whitepaper, model/serial list, original label photos and port photos.

Specialized documents if required

ATTT licence, civil cryptography licence, ICT conformity dossier, test report, labelling dossier and encryption function explanation.

Dossier group	Required documents	Used for which step	Usually prepared by	Common error	Pre-ETA check
Commercial	Invoice, Packing List, Contract/PO	Value, product name, quantity, Incoterms	Importer, procurement, shipper	Generic name, missing model, wrong origin	Cross-check with catalogue, original label and expected licence.
Transport	B/L or AWB, arrival notice, pre-alert	D/O, declaration, ETA tracking	Forwarder/agent, shipper	Wrong consignee, package mismatch, late pre-alert	Lock transport data before ETA.
Technical	Catalogue, datasheet, user manual, security whitepaper	HS classification and ATTT/MMDS policy review	Supplier, project technical team, importer	Encryption/VPN functions not clearly shown	Request official datasheet for the exact model.
Specialized	ATTT/MMDS licence, test report, conformity dossier if any	Clearance and policy explanation	Compliance/legal/importer	Applying for licence after arrival, model mismatch on licence	Prepare from PO confirmation.
Origin	C/O, through B/L if needed	Special preferential duty	Shipper/exporter/importer	Wrong form, HS or goods description	Review draft C/O before issuance.

DECISION POINTS THAT MAY HOLD THE SHIPMENT

Decision point	Question to answer	Evidence	Consequence if unclear	Recommended handling
Product nature	Is it a complete encrypted gateway or an ordinary router/gateway?	Catalogue, datasheet, device photos	Wrong HS/licence, explanation request	Finalize technical description before invoice issuance.
Civil cryptography	Does it use cryptographic algorithms to secure data/IP flows?	Security whitepaper, admin guide, VPN/IPSec/TLS specs	Missing civil cryptography licence if applicable	Review Decree 211/2025 before shipment.
Network security	Does the model fall under licensed VPN products?	Appendix of Circular 10/2022/TT-BTTTT, product functions	Insufficient licence at declaration	Prepare licensing dossier before ETA.
HS code	8517.62.43, 8517.62.49 or 8471.xx?	Datasheet, structure, packaging, photos	Channel change, duty adjustment or C/O rejection	Prepare HS classification memo.
C/O	Correct form, HS, description and origin criterion?	Draft C/O, invoice, packing list, transport docs	Preferential duty not accepted	Review draft before arrival.
Label and condition	Are original label, model, serial and condition clear?	Label photos, serial list, RMA/warranty note	Supplementary label or explanation request	Prepare supplementary label and condition dossier.

PRACTICAL E2E WORKFLOW

1. Pre-ETA review

Finalize HS code, ATTT/MMDS policies, MFN/ordinary/VAT, C/O, labelling and goods condition before arrival.

2. Lock documents and technical dossier

Cross-check invoice, packing list, B/L/AWB, catalogue, datasheet, model list, serial list, product name, origin and encryption specs.

3. Prepare licences/specialized dossier

If ATTT or civil cryptography applies, prepare licence dossier before ETA; if radio module exists, review ICT conformity.

4. Lodge customs declaration

Declare HS, value, C/O, product name, model and specialized policy. Keep explanation dossier ready for Yellow/Red channel.

5. Clear and deliver cargo

Monitor processing result, release cargo, deliver to warehouse and apply supplementary label or conformity mark if required.

6. Archive post-clearance dossier

Keep shipment file, licences, catalogue, C/O and HS/policy explanation dossier for post-clearance audit.

PRE-ETA RISK CHECKLIST

Risk	Consequence	How to block before ETA	Documents to check
Generic gateway/router description	Wrong HS or missed ATTT/MMDS licence	Standardize product name by encrypted gateway function and exact model	Invoice, catalogue, datasheet
Missing ATTT or civil cryptography licence if applicable	Shipment held, additional dossier, storage cost	Review Circular 10/2022 and Decree 211/2025 when PO is confirmed	Catalogue, model, functions, licence dossier
Model mismatch across invoice, packing list, licence and catalogue	Document correction or explanation request	Use consistent model naming throughout the dossier	Model list, serial list, label photos
Incorrect C/O form/HS/description	FTA preferential duty not accepted	Review draft C/O before original issuance	Draft C/O, invoice, B/L
Wireless module not reviewed	Missing ICT conformity or quality inspection if applicable	Request datasheet showing band, power and radio module	Radio datasheet, test report, module certificate
No technical dossier for Yellow/Red channel	Delay and additional document request	Prepare technical and HS explanation dossier in advance	Datasheet, user manual, technical memo

FAQ – COMMON BUSINESS QUESTIONS

Does encrypted gateway require an import licence?

It may require a licence if it falls under VPN/network information security products or civil cryptography products. Review actual model and functions.

Which HS code should be used?

Core reference codes under the VPN/network security list include 8471.30.90, 8471.41.90, 8471.49.90, 8517.62.43 and 8517.62.49. If civil cryptography/IP flow security is also assessed, extended 8517 codes must be cross-checked against the actual technical dossier.

Is VAT 10% or 8%?

Provision 10% and apply 8% only where the goods qualify under the VAT reduction policy and are not excluded at declaration time.

Can C/O reduce duty?

It may enable special preferential duty if the C/O is valid, correct form, correct HS, correct description and satisfies the applicable FTA origin rules.

Is an emailed VPN licence covered by this article?

No. This article covers tangible imported appliances. Electronic licences or SaaS should be reviewed separately.

What if model on invoice differs from catalogue?

Correct or supplement documents before ETA. After declaration, customs may require explanation or amendment.

Are warranty/RMA goods treated the same as commercial goods?

Not automatically. Warranty, RMA, demo or project goods require separate import purpose, value and condition dossier.

TGIMEX EXECUTION SUPPORT

This article provides a map of HS code, duties, C/O, dossier and specialized policies for encrypted gateways. In practice, each shipment still needs review by catalogue, datasheet, model, encryption algorithms/protocols, documents, origin and actual import purpose.

Pre-ETA review

Review HS code, ATTT/MMDS policies, C/O, duties, labelling, catalogue/datasheet/model before cargo arrival.

Compliance dossier control

Cross-check Invoice, Packing List, B/L/AWB, C/O, licences, catalogue, test report, labels and technical documents.

International logistics

Coordinate agents, carriers/airlines, ETA tracking, pre-alert, transport documents and delivery plan.

Customs declaration

Prepare declaration dossier, handle Green/Yellow/Red channels and support explanation on HS, value, origin and specialized policies.

Post-clearance

Archive shipment dossier, review supplementary labels, conformity marks where applicable and prepare post-clearance documents.

Project coordination

Support shipments for FDI/EPE/factory or projects involving technical requirements, timeline and multi-party coordination.

For shipments that may involve licences, C/O, specialized inspection or labelling requirements, enterprises should not wait until cargo arrival to start dossier review. A small mismatch between Invoice, Packing List, catalogue, datasheet, C/O or product label may lead to additional documents, delayed clearance or unplanned storage costs. TGIMEX supports enterprises in building an E2E import plan: pre-ETA policy review, document checking, international transport coordination, customs declaration, clearance handling, inland delivery and post-clearance dossier archiving.

ELECTRICAL – ELECTRONICS – IT EQUIPMENT

F&B

MACHINERY

HOUSEHOLD GOODS

COSMETICS – PERSONAL CARE