IPS/IDS should not be treated as ordinary IT equipment where the catalogue shows specialized network security functions. Wrong HS classification, missing cyberinformation security import licensing, overlooked encryption functions or model inconsistencies among Invoice, Packing List, catalogue and permit may lead to customs inspection, additional document requests, loss of C/O preference, DEM/DET costs and project delay. For the product covered in this article, the importer should confirm the model, intended use, construction or composition, new/used condition, and technical documents before concluding the HS code, tax treatment, or specialist policy. The following sections organize the main controls from document receipt, catalogue and label review through dossier preparation, declaration, and coordination at the port of entry.

E2E map: this article helps enterprises review HS Code, duties, C/O, specialized policy, customs documents, clearance decision points and pre-ETA risk checklist for the single product IPS/IDS.

QUICK FACT

Review item	Working position for IPS/IDS	Point to close before ETA
Product scope	IPS/IDS (Intrusion Prevention System / Intrusion Detection System) in hardware appliance or dedicated hardware system form.	Do not apply this conclusion to Firewall, NAC, DDoS appliance, SIEM, UTM or Network Monitoring if the model/function differs.
Reference HS Code	8471.30.90 / 8471.41.90 / 8471.49.90 should be reviewed first where the product is an automatic data processing device. 8517.62.* should be reviewed only where the principal function is network data transmission/reception/conversion.	Close the code based on catalogue, datasheet, configuration, ports, CPU/storage, processing function and commercial description.
Import duty	Many 8471/8517 codes may have reference MFN duty of 0%; ordinary duty must be checked against the tariff in force. A 5% reference point is often seen in common tariff lookups.	Do not lock the duty rate without checking the tariff on the declaration date.
VAT	May be 8% or 10%, depending on the declaration date and exclusion appendices under the VAT reduction policy.	Check Resolution 204/2025/QH15 and Decree 174/2025/NĐ-CP before declaration.
Specialized policy	May require an import license for cyberinformation security products if the model falls under the IPS/IDS list. If encryption, VPN, key management or civil cryptography functions exist, review MMDS separately.	Do not conclude “no license required” before reviewing datasheet/license features.
Key documents	Invoice, Packing List, B/L/AWB, C/O if any, catalogue/datasheet, model list, label photos, security feature documents and specialized permits if applicable.	Goods name, model, serial, origin, specifications and functions must match across documents, catalogue, permit and customs declaration.

Illustration for Import Procedures for IPS/IDS Appliances — Illustration of the product group and document review before customs clearance.

Legal note: This is an operational review framework for IPS/IDS shipments. Enterprises must check catalogue, datasheet, model, license features, goods condition and actual import purpose before application. Do not use this article as a conclusion for Firewall, NAC, DDoS appliance, SIEM, UTM or Network Monitoring if the model/function differs.

SCOPE OF APPLICATION

This article applies only to IPS/IDS in hardware appliance or dedicated hardware system form used for detecting, analysing, alerting or preventing network intrusion.

Do not automatically apply it to Firewall, NAC, DDoS appliance, SIEM, UTM or Network Monitoring although they are in the same product group.
Brand-new, used, refurbished, sample, warranty or project goods may trigger different policies.
If the product includes Wi-Fi/Bluetooth/4G/5G modules, battery, adapter, charger, software license, VPN, encryption or key management, each element must be separately reviewed.
Review based on catalogue, datasheet, model and actual import purpose.

CLASSIFICATION & TECHNICAL IDENTIFICATION

Technical identification

IPS/IDS is commonly identified through model name, intrusion prevention/detection features, deep packet inspection, threat signatures, traffic analysis, throughput, number of network ports, rackmount/desktop appliance form, centralized management and related security licenses.

Information consistency

Goods name, model, serial, quantity, origin, configuration, security functions and condition must match commercial documents, catalogue, labels, specialized dossiers and customs declaration.

Generic description may lead to wrong HS, wrong specialized policy, wrong QCVN/TCVN if quality management applies, wrong permit if special functions exist and wrong labelling for circulation.

Criterion to check	Documents to compare	Risk if wrongly described	Suggested description on documents/declaration
Commercial name and model	Catalogue, datasheet, model list, label photos, quotation/PO	A generic “network device” description may cause wrong HS, wrong ATTTM licensing or missed MMDS review.	“IPS/IDS appliance for network intrusion detection/prevention, model…, brand new”.
Main security function	Datasheet, user manual, license feature, module list	Failure to identify intrusion prevention/detection functions may trigger policy clarification.	State IPS/IDS, network security appliance, throughput, ports and licenses if any.
Hardware configuration	CPU, RAM, storage, network ports, rackmount/desktop form factor	May confuse data processing equipment with network transmission equipment for HS purposes.	Include core configuration if necessary; do not use an overly broad name.
Encryption/VPN/SSL/IPsec functions	Security feature list, encryption module, license sheet	May trigger MMDS review; omission can delay licensing or clearance.	Separate ordinary network security functions from cryptographic/encryption functions.
Condition and import purpose	Invoice, contract, warranty/RMA document, project file, new/used confirmation	Used/refurbished/warranty/sample goods may be subject to different policies.	State brand-new condition or actual import purpose clearly.

HS CODE – DUTIES – C/O

HS Code for IPS/IDS should not be determined solely by commercial name. Key bases include principal function, hardware structure, operating principle, data processing capability, network transmission/reception function and technical documents for each model. The codes below are references for review and do not replace official customs classification.

Reference HS Code table

Reference HS Code	Application condition	Risk if wrongly applied	Documents to compare
8471.49.90	Reference where IPS/IDS is a dedicated automatic data processing system with CPU/storage/appliance configuration and not merely a data transmission device.	May be rejected if the catalogue shows the principal function is network data transmission/reception/conversion or telecom equipment.	Catalogue, datasheet, hardware configuration, operating diagram and main function description.
8471.30.90 / 8471.41.90	Only where the device satisfies the corresponding description of integrated/specialized automatic data processing equipment.	Wrong code may affect duty, ATTTM policy and customs explanation.	Datasheet, dimensions, display/keyboard if any, CPU structure and independent processing capability.
8517.62.43 / 8517.62.49 / 8517.62.*	Only where the principal function is network data transmission, reception or conversion; technical description must be reviewed.	Using 8517 for an independent processing/security appliance may lead to reclassification.	Network diagram, port list, throughput, routing/switching/gateway functions and datasheet.

Duty and VAT review table

Reference HS	Ordinary import duty	MFN import duty	VAT	FTA preferential duty with C/O	Application note
8471.49.90	Reference 5% in many tariff lookups; verify the tariff in force on declaration date.	Reference 0% if the code is correct and no tariff amendment applies.	8% or 10% depending on exclusion appendices and declaration date.	Many FTAs may reach 0%; if MFN is already 0%, C/O mainly supports origin/commercial compliance.	Not a substitute for official classification; review actual documents.
8471.30.90 / 8471.41.90	Must be checked by exact subheading; do not lock the rate before classification.	May be 0% for certain 8471 codes.	8% or 10% depending on valid VAT policy.	Apply per FTA only with valid C/O and origin criteria.	Use only if the product truly matches the code description.
8517.62.*	Reference 5% for certain network data equipment; verify the exact 8-digit code.	Reference 0% for many network equipment codes; confirm with tariff.	8% or 10% depending on classification and policy at declaration.	May enjoy ACFTA, ATIGA, RCEP, EVFTA, CPTPP… if C/O is valid.	Do not use 8517 merely because the device has network ports.

C/O note: C/O (Certificate of Origin) provides preferential duty only if the form, origin criterion, goods description, HS Code and FTA requirements are valid. Where MFN duty is already 0%, C/O still supports origin and commercial compliance but may not reduce import duty further.

SPECIALIZED POLICY MATRIX

Goods scenario	Possible applicable policy	Documents to check	Authority/portal if identifiable	Recommended timing	Risk note
IPS/IDS under the licensed cyberinformation security product list	Review import license for cyberinformation security products.	Catalogue, datasheet, IPS/IDS feature description, model list, enterprise documents, contract/invoice.	Authority of Information Security – Ministry of Information and Communications; MIC public service portal or national public service portal.	Before ETA, ideally before shipment leaves origin.	Circular 10/2022/TT-BTTTT identifies the licensing authority as the Authority of Information Security; do not wait until cargo arrival.
Device with VPN, encryption, SSL/IPsec, key management or crypto module	May require MMDS review under Decree 211/2025/NĐ-CP.	License feature, encryption specification, user manual, manufacturer statement.	Civil cryptography management authority under specialized regulations; review actual file.	Before contract/signing if encryption is material.	Do not assume all IPS/IDS products are MMDS; it depends on actual functions.
Device with Wi-Fi/Bluetooth/4G/5G module	May trigger radio frequency/ICT conformity policy depending on wireless module.	Wireless module datasheet, RF test report, label, applicable QCVN documents.	Telecom/ICT quality authority or portal if in scope.	Before ETA to avoid missing reports.	Ethernet ports alone do not create radio policy.
Adapter, battery or accessories included	May require separate HS/policy if imported separately or regulated separately.	Packing List, accessory list, adapter specification, accessory labels.	Customs and relevant specialized authority if applicable.	When freezing Packing List and document set.	Accessories may change goods description or create separate declaration lines.
Used/refurbished/warranty/sample goods	May differ from brand-new commercial goods.	Goods condition, import purpose, warranty/RMA document, value invoice.	Customs and specialized authority if applicable.	Before declaration and before cargo arrival.	Do not apply this guide to used goods without reviewing prohibited/restricted lists.
Imports for EPE/FDI/factory/project	Control use purpose, contract, tax treatment and internal handover beyond clearance.	Project contract, PO, BOM, installation plan, use location.	Local customs office and internal compliance team.	Before booking and before ETA.	Wrong import purpose may affect finalization, audit and post-clearance inspection.

LEGAL DOCUMENTS TO REVIEW

Document group	Document name/number	Issuing body	Effective/applicable timing	Role in procedure	Key provisions/appendix to note	Review note
Law	Law on Cyberinformation Security No. 86/2015/QH13	National Assembly	Effective from 01/07/2016	Foundation for management of cyberinformation security products/services.	Review provisions on business/import of ATTTM products where applicable.	Use together with implementing decrees/circulars.
Law	Law on Foreign Trade Management No. 05/2017/QH14	National Assembly	Effective from 01/01/2018	Basis for import/export management by license/conditions.	Principles on licensing and conditional goods.	Review with Decree 69/2018/NĐ-CP.
Decree	Decree 69/2018/NĐ-CP	Government	Effective from 15/05/2018	Guides the Law on Foreign Trade Management.	Review goods under license/condition principles.	Does not replace ATTTM specialized rules.
Decree	Decree 108/2016/NĐ-CP	Government	Check validity at application date	Provides business conditions for cyberinformation security products/services and is cited in Circular 10/2022/TT-BTTTT.	Conditions relating to enterprises trading ATTTM products.	Review with amendments if any.
Circular	Circular 13/2018/TT-BTTTT as amended by Circular 10/2022/TT-BTTTT	Ministry of Information and Communications	Circular 10/2022/TT-BTTTT effective from 15/09/2022	Licensed import list and licensing procedure for cyberinformation security products.	Article 1 of Circular 10/2022/TT-BTTTT amends licensing authority, online submission and replaces Appendices I and II.	IPS/IDS must be compared with appendix list and actual technical description.
Decree	Decree 211/2025/NĐ-CP	Government	Effective from 09/09/2025	Management of civil cryptography activities and relevant sanctions amendments.	Review if the device has encryption, VPN, key management or crypto module.	Do not assume every IPS/IDS is MMDS.
Decree	Decree 43/2017/NĐ-CP as amended by Decree 111/2021/NĐ-CP	Government	Currently applicable; check at circulation date	Goods labelling and Vietnamese supplementary label.	Mandatory label contents: goods name, origin, responsible organization and other group-specific contents.	Original label and supplementary label must match documents/model/origin.
Tariff	Decree 26/2023/NĐ-CP and amendments if any	Government	Effective from 15/07/2023; check latest version	Basis for MFN duty, ordinary duty and HS tariff review.	Preferential import tariff schedule.	Always check on declaration date.
VAT	Resolution 204/2025/QH15 and Decree 174/2025/NĐ-CP	National Assembly; Government	VAT reduction policy from 01/07/2025 to 31/12/2026 within document scope	Determines VAT 8% or 10% depending on exclusions and timing.	Review Article 1 and appendices of Decree 174/2025/NĐ-CP.	Do not lock VAT at 10% during the reduction period without checking exclusions.
Customs	Customs Law 54/2014/QH13; Decree 08/2015/NĐ-CP; Circular 38/2015/TT-BTC amended by Circular 39/2018/TT-BTC	National Assembly; Government; Ministry of Finance	Check consolidated/amended text at procedure date	Customs declaration, document inspection, physical inspection, valuation, HS and C/O.	Rules on customs dossier, post-clearance audit and declaration channeling.	Check VNACCS/ECUS and local customs guidance.

VIEW / DOWNLOAD ORIGINAL LEGAL TEXTS

Enterprises may search legal documents by document number on the legal document portal, Government portal or the issuing authority website. Enterprises should also cross-check on the legal document portal or issuing authority website before application.

View Circular 10/2022/TT-BTTTT View Decree 211/2025/NĐ-CP View Decree 174/2025/NĐ-CP View Decree 26/2023/NĐ-CP

CUSTOMS DOCUMENT SET

Commercial document set

Commercial Invoice.
Packing List.
Bill of Lading/Air Waybill.
Sales Contract/Purchase Order if any.
C/O if claiming duty preference.
Catalogue/Datasheet, product photos, original label and model list if needed.

Specialized documents if applicable

Import license for ATTTM products if in scope.
MMDS dossier if the model has regulated cryptographic/encryption functions.
Quality inspection, conformity declaration/certification or test report if triggered by module/function.
Labelling dossier, technical documents and user manual.

Control rule: goods name, quantity, model, serial, origin and technical specifications must match 100% among commercial documents, catalogue, labels, specialized dossier and customs declaration.

Document group	Required documents	Used for	Typical owner	Common error	Pre-ETA check
Commercial documents	Commercial Invoice, Packing List, Sales Contract/Purchase Order if any	Declaration, valuation, quantity and model check	Supplier, Procurement, Docs	Generic goods name; mismatched model/quantity/origin.	Compare each line with catalogue and model list.
Transport documents	B/L or AWB, Arrival Notice, booking/pre-alert	ETA tracking, delivery order and transport declaration	Forwarder, carrier/airline, Docs	Wrong consignee, package/weight mismatch, missing pre-alert.	Freeze details before arrival and compare with Packing List.
Origin	C/O if claiming duty preference, supporting origin documents if needed	FTA preference and origin explanation	Shipper, supplier, import-export team	Wrong form, HS, origin criterion or goods description.	Review draft C/O before the original is issued.
Technical documents	Catalogue, datasheet, user manual, model/serial list, label photos	HS, ATTTM/MMDS policy and customs explanation	Manufacturer, IT/Security team, Compliance	Datasheet fails to show IPS/IDS, throughput, ports or license.	Obtain complete file before ETA and highlight key functions.
Specialized documents	ATTTM import license if in scope; MMDS/conformity documents if triggered; test report if any	Specialized procedure before or alongside customs declaration	Compliance, service provider, authority/portal	License filed after ETA; model on license differs from invoice.	Review permit by exact model, quantity, function and reference HS.

CLEARANCE DECISION POINTS

Decision point	Question to answer	Evidence	Consequence if unclear	Recommended action
HS Code	Is the device mainly 8471 data processing or 8517 data transmission?	Catalogue, datasheet, functional diagram, configuration.	Reclassification, duty adjustment, clearance delay.	Close HS before ETA and prepare classification rationale.
ATTTM license	Does the model match IPS/IDS on the licensed product list?	Datasheet, license feature, product list, licensing file.	Additional permit request or cargo hold.	Review Circular 13/2018 and 10/2022 before booking.
MMDS	Does it include encryption, VPN, key management or crypto modules?	Encryption specification, user manual, manufacturer statement.	Additional specialized dossier may be required.	Separate encryption functions from ordinary IPS/IDS functions.
Model and label	Do invoice, packing list, catalogue, label and license show the same model?	Label photos, model list, license, invoice.	Suspected mismatch with licensed goods or declaration.	Freeze model list and avoid informal abbreviations.
C/O	Is C/O form, origin criterion, description and HS correct?	C/O, invoice, B/L, origin rules.	FTA preference may be rejected.	Check draft C/O before shipment.
Goods condition	Is it brand-new, refurbished, warranty/RMA or sample goods?	Invoice, contract, RMA, supplier confirmation.	Wrong policy or import restriction risk.	State condition and import purpose in the file.

PRACTICAL E2E PROCESS

Step 1: Pre-ETA review

Close HS, policy, duty, C/O, label and ATTTM/MMDS licensing if any.

Step 2: Freeze documents

Freeze Invoice, Packing List, B/L/AWB, catalogue, datasheet, model/serial list and check consistency.

Step 3: Specialized registration

File ATTTM/MMDS or other specialized dossiers if the model is in scope; do not wait until arrival.

Step 4: Customs declaration

Green channel: conditional system clearance; Yellow: document inspection; Red: document and physical inspection.

Step 5: Clearance and delivery

Complete tax payment, release cargo, deliver to warehouse and control supplementary labels/marks if applicable.

Step 6: Post-clearance retention

Retain shipment documents, permits, C/O, catalogue and HS/policy explanation for audit.

PRE-ETA RISK CHECKLIST

Risk	Consequence	Pre-ETA prevention	Documents to check
Generic goods name such as “security device” or “network appliance”	Wrong HS, wrong license and difficult explanation under yellow/red channel.	Standardize goods name as IPS/IDS with main function.	Invoice, Packing List, catalogue, datasheet.
Missing ATTTM license for a listed model	Cargo hold, storage costs and project delay.	Review Circular 13/2018 and 10/2022; prepare licensing file before ETA.	Datasheet, model list, licensing file.
Overlooking encryption/VPN/MMDS functions	Additional dossier request or policy adjustment.	Ask supplier for license feature and encryption specification.	User manual, feature list, manufacturer statement.
Model mismatch among documents, catalogue, label and license	Possible suspicion of wrong goods or wrong permit.	Freeze model list before official documents are issued.	Invoice, PL, original label, catalogue, license.
Wrong C/O form/HS/goods description	Preference denied or C/O correction required.	Check draft C/O before original issuance.	Draft C/O, invoice, B/L, HS code.
VAT not reviewed by declaration date	Incorrect tax declaration, amendment or adjustment.	Check Decree 174/2025/NĐ-CP and exclusion appendices.	Tariff, VAT policy and draft declaration.

FAQ

Does IPS/IDS import require a license?

It may require an import license for cyberinformation security products if the model falls under the list and matches the IPS/IDS description. Review catalogue, datasheet and Circular 13/2018/TT-BTTTT as amended by Circular 10/2022/TT-BTTTT.

Is quality inspection/conformity required?

No general conclusion should be made. If the model has wireless modules, telecom equipment functions or components under quality/conformity management, separate review is required.

Is Vietnamese supplementary labelling required?

Yes, where goods are circulated in Vietnam and the original label does not contain sufficient Vietnamese mandatory contents.

Can C/O reduce import duty?

Possibly, if the HS Code still bears duty and C/O is valid under the applicable FTA. If MFN is 0%, C/O mainly supports origin control.

Are sample/warranty goods handled like commercial goods?

Not automatically. Sample, warranty/RMA, project or non-payment goods may differ in valuation, import purpose and explanation dossier.

What if invoice model differs from catalogue?

Request the supplier to correct documents or provide a model mapping confirmation before declaration. Do not declare when model consistency is unresolved.

IMPLEMENTATION SUPPORT FROM TGIMEX

This article provides a map of HS Code, duties, documents and specialized policies for IPS/IDS. However, an actual shipment still requires review based on catalogue, datasheet, model, documents, origin, license features and import purpose.

Execution capability

Agency network in more than 60 countries.
Member of WCA, WCA China Global, VLA and HNLA.
Sea freight, air freight, road/rail transport capability.
Customs clearance, C/O, import licensing, warehousing and domestic delivery capability.

Support scope

Pre-ETA review: HS, policy, C/O, duties, labels, catalogue/datasheet/model.
Compliance dossier control: Invoice, Packing List, B/L/AWB, C/O, test report, labels and technical documents.
International logistics coordination, ETA tracking, pre-alert and transport documents.
Customs declaration, Green/Yellow/Red channel handling, HS/value/origin/policy explanation.

For shipments that may involve specialized inspection, permits, C/O or labelling requirements, enterprises should not wait until cargo arrival to start dossier review. Each small mismatch among Invoice, Packing List, catalogue, datasheet, C/O or labels may lead to additional document requests, delayed clearance or unplanned storage costs.

TGIMEX supports enterprises in setting up an E2E import plan: pre-ETA policy review, document checking, international transport coordination, customs declaration, clearance handling, inland delivery and post-clearance file retention. This approach helps enterprises better control schedule, cost and compliance risks from the preparation stage.

ELECTRICAL – ELECTRONICS – IT EQUIPMENT

F&B

MACHINERY

HOUSEHOLD GOODS

COSMETICS – PERSONAL CARE