A VPN appliance should not be treated as an ordinary router when the catalogue shows encryption, IPsec/SSL VPN tunnelling, key management, user authentication or site-to-site secure connectivity. If the importer applies the wrong HS Code, misses civil cryptography requirements, confuses the item with a wireless router, lacks a specialised import permit, or lets model numbers differ across the Invoice, Packing List, catalogue and permit, the shipment may be channelled for inspection, require additional documents, lose C/O duty preference, incur DEM/DET and delay network deployment.

E2E map: this article helps companies review HS Code, duties, C/O, specialised policy, customs documents, clearance decision points and pre-ETA risk controls for one product only: VPN appliance.

QUICK FACT

Review item	Direction for VPN appliance	Point to finalise before ETA
Product	VPN appliance: dedicated hardware used to establish, manage or protect VPN connections between users, branches, data centres or cloud environments.	Do not apply one conclusion to secure routers, encrypted gateways, firewalls, UTM or network appliances if functions, licences and security algorithms differ.
Reference HS Code	Headings 8517.62.43 / 8517.62.49 should be prioritised for gateway/router/bridge equipment used for data reception, conversion and transmission. Heading 8517.62.51 applies where Wi-Fi/wireless LAN is integrated; 8517.62.59 or 8517.62.99 should be considered only when actual configuration fits residual descriptions.	Finalise based on catalogue, datasheet, function diagram, WAN/LAN ports, radio module, CPU/crypto accelerator, VPN licence and commercial description.
Import duty	Many 8517.62 codes have an indicative MFN rate of 0%. The ordinary rate must be checked against the current tariff; in practice 0% or 5% may need to be reviewed depending on code and tariff version.	Do not lock the duty before reviewing Decree 26/2023/ND-CP, amendments and the tariff effective on declaration date.
VAT	Conservative position: VAT is 10% if the item is classified under heading 8517.62/telecommunications goods or falls under the VAT-reduction exclusion appendices; 8% should only be considered if the actual dossier and customs authority confirm that the item is outside the excluded groups on the declaration date.	Review Resolution 204/2025/QH15 and Decree 174/2025/ND-CP before declaring.
Specialised policy	May fall under civil cryptography if it has encryption, IP-flow protection, VPN, key management or crypto modules. If it is also a specialised cyberinformation security product, review ATTTM import licence. If Wi-Fi/4G/5G is integrated, ICT quality inspection/conformity may arise.	Do not conclude “no permit required” before reading the datasheet, user manual, licence features and manufacturer confirmation.
Key documents	Invoice, Packing List, B/L/AWB, C/O if any, catalogue/datasheet, user manual, model list, label photos, VPN/encryption specifications, licence features and specialised permits/documents if applicable.	Product name, model, serial, origin, technical data and functions must match across commercial documents, catalogue, permit and customs declaration.

Legal note: This is an operational review framework for VPN appliance shipments. Companies must review catalogue, datasheet, model, licence features, encryption algorithms, item condition and actual import purpose. Do not automatically apply this guidance to secure routers, encrypted gateways, firewalls, UTM devices or other network equipment with different models/functions.

SCOPE OF APPLICATION

This article applies only to VPN appliance as dedicated hardware used to establish, encrypt, authenticate, route or protect virtual private network connections.

Do not automatically apply it to secure routers, encrypted gateways, firewalls, UTM, consumer modem/routers or cloud/software-only products.
New, used, refurbished, sample, warranty/RMA or project cargo may require different policy, valuation and explanation dossiers.
If the product includes Wi-Fi/Bluetooth/4G/5G, battery, adapter, charger, crypto module, software licence, IPsec/SSL VPN, IP-flow protection or key management, each element must be reviewed separately.
Review must be based on the actual catalogue, datasheet, model and import purpose.

CLASSIFICATION & TECHNICAL IDENTIFICATION

When reviewing a catalogue, do not rely only on the commercial name “VPN appliance”. Determine whether the technical nature is data transmission gateway/router, network security equipment, or a civil cryptography product with dedicated encryption functions.

Key points include WAN/LAN ports, IPsec/SSL/OpenVPN/WireGuard or proprietary VPN protocols, VPN throughput, concurrent tunnels, encryption algorithm, crypto accelerator, key management, user authentication, firewall/IDS/IPS features, Wi-Fi/4G/5G module, licence status and enterprise network use case.

Technical criterion	Document to review	Risk if misdescribed	Suggested description on documents/declaration
Commercial name and model	Catalogue, datasheet, model list, label photo	Generic wording such as “network device” may lead to wrong HS, wrong permit or weak explanation under inspection.	VPN appliance, model…, used for virtual private network connectivity; state wired/wireless if applicable.
VPN/encryption functions	User manual, security feature list, licence feature, manufacturer statement	Civil cryptography or specialised permits may be missed if encryption, IP-flow security or key management is present.	VPN appliance with IPsec/SSL VPN function; state no Wi-Fi/4G/5G if applicable.
Ports and data transmission	Datasheet, front/rear photos, network diagram	Wrong choice between 8517.62.43, 8517.62.49, 8517.62.51, 8517.62.59 or 8517.62.99.	Describe WAN/LAN/SFP ports, connection type and whether radio module exists.
Hardware configuration	CPU, RAM, storage, crypto accelerator, radio module	May be confused with automatic data-processing machines or ordinary routers if the main function is unclear.	Dedicated gateway/VPN appliance, not a multi-purpose server if the catalogue shows dedicated appliance nature.
Software/licence included	Licence certificate, subscription, packing list, invoice	Licence may affect customs value, item description or permit scope.	Separate hardware and licence/subscription if shown separately on contract and invoice.
Item condition	Invoice, contract, RMA, label/serial photos	Refurbished/warranty/sample goods may need a different explanation than new commercial goods.	State new 100%, sample, warranty/RMA or refurbished according to actual documents.

HS CODE – DUTY – C/O

VPN appliance should be reviewed by its principal function: data reception/transmission/conversion, routing/gateway operation, VPN connectivity and encryption function. HS should not be finalised by commercial name only; review catalogue, hardware structure, operating principle and use case.

Reference HS Code	Condition for application	Risk if misapplied	Documents to review
8517.62.43	Gateway/router/bridge or similar equipment designed only for connection to automatic data-processing machines, where technical description fits this code.	Misclassification into a residual code may trigger reclassification, duty adjustment or additional explanation.	Catalogue, datasheet, network diagram, WAN/LAN/SFP port description, user manual.
8517.62.49	Equipment for line telephony/telegraphy carrier-current or digital line systems where no more specific description fits.	May be confused with 8517.62.43 where the device is essentially a router/gateway for ADP connection.	Data transmission principle, wired environment and port configuration.
8517.62.51	Only where the VPN appliance integrates Wi-Fi or wireless LAN equipment.	ICT quality/conformity policy may be missed if radio module exists; or wrong code if it is wired-only.	Wi-Fi specifications, frequency band, transmit power, applicable QCVN/test report.
8517.62.59 / 8517.62.99	For review where the device does not fit the above descriptions and classification must follow actual configuration.	Residual codes are easily questioned if technical description is insufficient.	Detailed catalogue, product photos, principal-function explanation, classification ruling if needed.
8471.x	Only in exceptional cases where the product is an ADP machine/server running VPN software, not a dedicated gateway/router appliance.	Wrong technical nature may lead to wrong specialised policy and duty.	x86/server configuration, OS, use case and manufacturer documents.

Duty reference table to review

Reference HS	Ordinary import duty	MFN preferential import duty	VAT	Special preferential duty with C/O	Application note
8517.62.43	Indicative 0% or 5% depending on ordinary tariff to be checked	Indicative 0%	10% if classified under 8517.62/telecommunications goods or listed in exclusion appendices; 8% only if confirmed outside the excluded groups on declaration date	Often 0% if valid C/O and FTA rules are met	Review Decree 26/2023/ND-CP, amendments and the tariff effective on declaration date.
8517.62.49	Indicative 0% or 5% depending on ordinary tariff to be checked	Indicative 0%	10% if classified under 8517.62/telecommunications goods or listed in exclusion appendices; 8% only if confirmed outside the excluded groups on declaration date	Depending on FTA, C/O form and origin rule	Relevant where the wired equipment falls into other line-system equipment.
8517.62.51	Indicative 0% or 5% depending on ordinary tariff to be checked	Indicative 0%	10% if classified under 8517.62/telecommunications goods or listed in exclusion appendices; 8% only if confirmed outside the excluded groups on declaration date	Depending on FTA, C/O form and origin rule	Use only when wireless LAN/Wi-Fi exists and ICT conformity/quality policy is reviewed.
8517.62.59 / 8517.62.99	Indicative 0% or 5% depending on code and applicable tariff	Many codes are indicative 0%; certain codes may differ and must be checked	10% if classified under 8517.62/telecommunications goods or listed in exclusion appendices; 8% only if confirmed outside the excluded groups on declaration date	Depending on FTA, C/O form and origin rule	Do not use residual codes as a “safe code” when catalogue supports a more specific code.

APPLICABLE SPECIALISED POLICY

Cargo situation	Potential policy	Documents to check	Authority/portal if identifiable	Recommended timing	Risk note
Standard wired VPN appliance	Normal customs procedure plus MMDS/ATTTM review based on actual features.	Catalogue, datasheet, user manual, licence features, manufacturer statement on radio module if any.	Customs authority; specialised authority if permit arises.	Before ETA, preferably before booking.	Do not conclude permit exemption before confirming encryption/VPN and key management functions.
Device with IPsec/SSL VPN, IP-flow security, key management or crypto module	May be civil cryptography product; import permit and business conditions may need review if imported for commercial purpose.	Encryption specification, algorithm, key management, user manual, datasheet, contract/licence.	Government Cipher Committee / civil cryptography authority as regulated; applicable portal per current guidance.	Before cargo arrival; do not wait until Arrival Notice.	Missing MMDS dossier may hold the shipment and generate storage costs.
Device also marketed as specialised cyberinformation security product	ATTTM import licence may be required if it falls under the list in Circular 13/2018 as amended by Circular 10/2022.	Catalogue, security feature description, licence, model list, enterprise dossier.	Authority of Information Security / Ministry of Information and Communications.	As soon as final datasheet/model is available.	VPN appliances may overlap with firewall/UTM/security gateway; read the applicable list carefully.
Device with Wi-Fi/Bluetooth/4G/5G	May trigger state quality inspection, conformity certification/declaration and ICT conformity mark.	Frequency band, transmit power, test report, applicable QCVN, radio module.	Authority of Telecommunications, National Single Window/VNSW if applicable.	Before ETA to avoid clearance and circulation delay.	Do not apply wired-only policy to products with radio modules.
Adapter/charger/battery included	Review goods labelling, electrical safety and battery transport conditions if any; separate requirements may arise by configuration.	Packing list, accessory photos, adapter/battery specs, MSDS if battery exists.	Customs authority; carrier/airline/shipping line for transport acceptance.	Before booking and packing-list confirmation.	Accessories may affect description, value, transport and labelling.
Used/refurbished/warranty/RMA goods	May require explanation for condition, value, import purpose and used-goods policy.	Invoice, contract, RMA, warranty confirmation, serial photos, condition statement.	Customs and specialised authority if applicable.	Before supplier issues documents.	Do not use new-goods dossier for refurbished or warranty goods.
Imported for EPE/FDI/factory/project	Customs regime depends on import type, use purpose, tax policy and project dossier.	PO/contract, import purpose, project documents, specialised permit if any.	Supervising customs branch; specialised authority if applicable.	Before declaration submission.	Wrong customs regime or purpose may affect tax and post-clearance audit.

LEGAL DOCUMENTS TO REVIEW

Document group	Document name/number	Issuing authority	Effective date / application timing if identifiable	Role in procedure	Key article/appendix to note if any	Review note
Law	Law on Foreign Trade Management 05/2017/QH14	National Assembly	Effective from 01/01/2018	Framework for import/export management and goods subject to permits/conditions.	Principles on foreign trade management and permits.	Read together with Decree 69/2018/ND-CP and specialised regulations.
Decree	Decree 69/2018/ND-CP	Government	Issued 15/05/2018	Details several articles of the Law on Foreign Trade Management.	Appendices on goods under permits/conditions.	Does not replace MMDS/ATTTM specialised review.
Law	Law on Cyberinformation Security 86/2015/QH13	National Assembly	Check status at application date	Legal framework for cyberinformation security products/services and civil cryptography.	Provisions on cyberinformation security products/services and civil cryptography.	Read with implementing decrees/circulars.
Decree	Decree 211/2025/ND-CP	Government	Effective from 09/09/2025	Key basis for civil cryptography activities where VPN appliance has encryption/IP-flow protection.	Lists, conditions and permits for civil cryptography products to be checked in original text.	Review by algorithm, encryption function and actual import purpose.
Circular	Circular 13/2018/TT-BTTTT and Circular 10/2022/TT-BTTTT	Ministry of Information and Communications	Circular 10/2022 effective from 15/09/2022	List of cyberinformation security products imported under licence and licensing dossier/procedure.	Product list appendices and permit templates if applicable.	Apply only if the model falls within the listed product group.
Circular/QCVN	Circular 02/2024/TT-BTTTT and relevant QCVN	Ministry of Information and Communications	Effective from 15/05/2024	List of group-2 goods under MIC, especially if Wi-Fi/4G/5G exists.	Appendices and relevant QCVN by radio module.	Not for wired-only equipment outside the list; technical proof is needed.
Decree	Decree 132/2008/ND-CP, 74/2018/ND-CP, 154/2018/ND-CP	Government	Check amendments/status at application date	Framework on product/goods quality management and import quality inspection.	Group-2 goods, quality inspection, conformity assessment.	Apply where product is under quality management list.
Tariff	Decree 26/2023/ND-CP and amendments such as Decree 199/2025/ND-CP if still effective	Government	Decree 26/2023 effective from 15/07/2023; amendments must be checked	Basis for MFN import duty and tariff schedule.	Codes 8517.62.* and relevant codes.	Always check the tariff effective on declaration date.
VAT	Resolution 204/2025/QH15 and Decree 174/2025/ND-CP	National Assembly/Government	Decree 174/2025 effective from 01/07/2025	VAT reduction policy with exclusion appendices.	Exclusion appendices and application period.	Do not apply 8% by habit; for HS 8517.62, prioritise review of telecommunications/exclusion appendices and customs guidance.
Labelling	Decree 43/2017/ND-CP and Decree 111/2021/ND-CP	Government	Decree 43/2017 effective from 01/06/2017; Decree 111/2021 effective from 15/02/2022	Basis for original label, Vietnamese supplementary label and mandatory information.	Mandatory label contents and supplementary label rules.	Review label by model, origin, responsible party and technical specifications.

VIEW / DOWNLOAD ORIGINAL LEGAL DOCUMENTS

Companies may search documents by number on official legal document portals, the Government Portal or issuing authority websites. Companies should cross-check the Government legal document portal or issuing authority website before applying any rule.

Decree 211/2025/ND-CP Circular 10/2022/TT-BTTTT Circular 02/2024/TT-BTTTT Decree 26/2023/ND-CP Decree 174/2025/ND-CP Decree 43/2017/ND-CP

CUSTOMS CLEARANCE DOCUMENT SET

Commercial documents

Commercial Invoice.
Packing List.
Bill of Lading/Air Waybill.
Sales Contract/Purchase Order if any.
C/O (Certificate of Origin) if duty preference is claimed.
Catalogue, datasheet, user manual, model/serial list, product and original label photos.

Specialised documents if applicable

Civil cryptography import permit if applicable.
Cyberinformation security product import permit if listed.
State quality inspection, conformity certification/declaration if wireless/ICT group-2 modules exist.
Test report, technical file, labelling dossier, VPN/encryption specifications and licence features.

Dossier consistency rule: Product name, quantity, model, serial, origin, technical specifications and functions must match 100% across commercial documents, catalogue, labels, specialised dossier and customs declaration.

OPERATIONAL DOSSIER CHECKLIST

Dossier group	Required document	Used for which step	Usual preparer	Common error	Pre-ETA check
Commercial	Invoice, Packing List, Contract/PO	Declaration, value, quantity and purchase terms	Importer, procurement, shipper	Model suffix missing, wrong quantity, licence not separated	Check line by line against catalogue, model list and contract.
Transport	B/L or AWB, Arrival Notice, pre-alert	ETA monitoring, delivery order, transport declaration	Forwarder, carrier, agent	Wrong consignee, wrong port, missing pre-alert	Confirm B/L data before final issuance.
Technical	Catalogue, datasheet, user manual, label photo	HS classification, policy determination, customs explanation	Supplier, importer, IT technical team	Marketing catalogue too generic, no encryption/Wi-Fi data	Request full datasheet with VPN/encryption/radio specifications.
MMDS/ATTTM	Permit, application dossier, model list, function description	Specialised permit and customs cross-check	Compliance, legal, service provider	Permit model/quantity/function inconsistent	Freeze model list and licence feature before filing.
ICT quality/conformity	Quality inspection registration, conformity certificate/declaration, test report if applicable	Clearance/circulation for radio or group-2 ICT goods	Importer, lab, certification body	Wrong QCVN test report, missing label/ICT conformity mark	Check frequency, power, QCVN and model on test report.
C/O	Appropriate C/O form, transport docs, invoice, origin rule	Duty preference and origin control	Shipper, exporter, importer	Wrong form, HS, description or origin criterion	Review draft C/O before original issuance.

DECISION POINTS THAT MAY HOLD THE SHIPMENT

Decision point	Question to answer	Evidence document	Consequence if unclear	Recommended handling
HS Code	Is it a 8517 data gateway/router or a 8471 ADP machine? Does it have Wi-Fi?	Catalogue, datasheet, function diagram, port photos.	Reclassification, duty adjustment or additional explanation.	Finalise HS before ETA and prepare principal-function reasoning.
Civil cryptography	Does it have IPsec/SSL VPN, encryption, IP-flow security or key management?	Encryption specification, user manual, licence feature.	Civil cryptography permit/dossier may be requested, delaying clearance.	Review Decree 211/2025/ND-CP before import.
ATTTM	Does the model fall within the list of licensed cyberinformation security products?	Datasheet and security gateway/firewall/UTM description if any.	Shipment may be held for permit or explanation.	Read Circular 13/2018 and 10/2022 by actual model.
Wi-Fi/4G/5G	Does the device have radio module or antenna?	Frequency/power specs, test report, product photos.	ICT quality/conformity dossier may be missing.	Separate wired-only and wireless policy; prepare dossier before ETA.
Model/serial/label	Do model numbers match invoice, packing list, catalogue, label and permit?	Label photos, model list, serial list, permit.	Suspicion of wrong goods or wrong permit.	Freeze model list; do not abbreviate model on documents.
C/O	Is the C/O form, origin criterion, goods description and HS correct?	Draft C/O, invoice, B/L, origin rule.	Duty preference may be denied or C/O correction requested.	Check draft C/O before original issuance.
Item condition	Is it new, refurbished, sample, warranty/RMA or project cargo?	Invoice, contract, RMA, supplier confirmation.	Wrong customs regime, value or policy explanation.	State condition and import purpose in the dossier.

PRACTICAL E2E PROCEDURE

Step 1: Pre-ETA review

Finalise HS, review MMDS/ATTTM/ICT policy, check duty, C/O, labelling and whether permit/quality inspection is required.

Step 2: Lock documents

Finalise Invoice, Packing List, B/L/AWB, catalogue, datasheet, model/serial list, licence feature and consistency checks.

Step 3: File specialised dossier if needed

Submit MMDS/ATTTM permit or ICT quality/conformity dossier if the model is in scope; do not wait until cargo arrival.

Step 4: Lodge customs declaration

Green channel: system clearance under conditions; Yellow: document inspection; Red: document and physical inspection. Prepare explanation on HS, value, C/O, model and policy.

Step 5: Clearance and delivery

Complete taxes, pick up/deliver cargo, control Vietnamese label, conformity mark or specialised requirements before circulation if applicable.

Step 6: Post-clearance archive

Archive shipment documents, permits, C/O, catalogue and HS/policy explanation for post-clearance audit or internal audit.

PRE-ETA RISK CHECKLIST

Risk	Consequence	Pre-ETA control	Document to check
Generic name such as “network device” or “router”	Wrong HS, wrong policy, weak explanation under yellow/red channel.	Standardise name as VPN appliance and describe principal function.	Invoice, PL, catalogue, datasheet.
Encryption/VPN/MMDS function missed	Permit or civil cryptography dossier may be missing, causing storage costs.	Ask manufacturer to confirm algorithm, VPN function, key management and licence features.	User manual, encryption specification, licence list.
Confusing wired appliance with Wi-Fi/4G/5G equipment	ICT quality/conformity dossier may be missed or wrong policy applied.	Check antenna, radio module, frequency band and transmit power.	Datasheet, test report, product photos.
Model mismatch across documents, catalogue, label and permit	Suspected wrong goods, wrong permit or wrong declaration.	Freeze model/serial list before official document issuance.	Invoice, PL, label photo, permit.
C/O with wrong form/HS/goods description	Duty preference may be denied or C/O amendment required.	Review draft C/O before original issuance.	Draft C/O, invoice, B/L, HS code.
VAT not reviewed on declaration date	Wrong tax declaration, amendment or additional dossier.	Check Decree 174/2025/ND-CP and exclusion appendices.	Tariff, VAT policy, draft declaration.

FAQ

Does VPN appliance require an import licence?

It may require a permit or specialised dossier if the model has civil cryptography, IP-flow security, key management or is listed as a cyberinformation security product. Review catalogue, datasheet and actual dossier.

Is quality inspection/conformity required?

No general conclusion should be made. If the device has Wi-Fi/Bluetooth/4G/5G or falls under ICT quality management, quality inspection, conformity certification and declaration may be required.

Is Vietnamese supplementary labelling required?

Yes, where goods are circulated in Vietnam and the original label does not contain all mandatory Vietnamese contents.

Can C/O reduce duty?

Possibly, if the HS still has duty and the C/O is valid under the applicable FTA. If MFN is already 0%, C/O still supports origin control.

Are sample/warranty goods handled like commercial goods?

Not automatically. Sample, warranty/RMA, project or non-payment goods may differ in value, import purpose and explanation dossier.

What if invoice model differs from catalogue?

Ask the supplier to amend documents or provide model mapping confirmation before customs declaration. Do not declare while model consistency is unresolved.

IMPLEMENTATION SUPPORT FROM TGIMEX

This article provides a map of HS Code, duty, documents and specialised policy for VPN appliance. In actual shipments, companies still need to review catalogue, datasheet, model, documents, origin, licence features, encryption algorithm and import purpose.

Execution capability

Agency network in more than 60 countries.
Member of WCA, WCA China Global, VLA and HNLA.
Capability in sea freight, air freight, road/rail transport.
Customs clearance, C/O, import permits, warehousing and domestic delivery.

Support scope

Pre-ETA review: HS, policy, C/O, duty, label, catalogue/datasheet/model.
Compliance dossier control: Invoice, Packing List, B/L/AWB, C/O, test report, label and technical documents.
International logistics coordination, ETA tracking, pre-alert and transport documents.
Customs declaration, Green/Yellow/Red channel handling, explanation on HS, value, origin and specialised policy.

For shipments that may involve specialised inspection, permits, C/O or labelling requirements, companies should not wait until cargo arrival to start dossier review. A small mismatch among Invoice, Packing List, catalogue, datasheet, C/O or label can lead to additional documents, clearance delay or unplanned storage costs.

TGIMEX supports companies in setting up an E2E import plan: pre-ETA policy review, document checking, international transport coordination, customs declaration, clearance handling, domestic delivery and post-clearance archiving. This approach helps control schedule, cost and compliance risk from the preparation stage.

Có liên quan

QUICK CONSULTATION

NEED TO REVIEW IMPORT PROCEDURES OR A SHIPPING PLAN?

Send us the product name, shipping route, current dossier, or implementation request in advance so we can suggest a suitable approach that is practical, focused, and aligned with your shipment.

CALL NOW

HOTLINE 0963 856 664 / 0982 135 393

EMAIL info@tgimex.com

SUITABLE FOR International shipping · Customs procedures · Import licenses · B2B logistics

ELECTRICAL – ELECTRONICS – IT EQUIPMENT

F&B

MACHINERY

HOUSEHOLD GOODS

COSMETICS – PERSONAL CARE