NAC (Network Access Control) is a cybersecurity appliance used to authenticate users/devices, control LAN/Wi‑Fi/VPN access, segment networks, assess endpoint posture and integrate with switches, firewalls, AD/LDAP, RADIUS/TACACS+ in enterprise infrastructure. If it is declared merely as “server”, “network appliance” or “security equipment”, the shipment may face wrong HS classification, cybersecurity import licensing issues, civil cryptography review, model inconsistency between documents and catalogue, or DEM/DET costs due to missing pre-ETA documentation. This guide provides an E2E map for reviewing HS code, taxes, specialized policy, customs documents, clearance workflow and risks before cargo arrival.

QUICK FACT

Review item	Direction for NAC	Operational note
Recommended product name	Network Access Control appliance (NAC), model…, used to authenticate and control access to enterprise networks	Do not describe it only as “server” or “network device” if the principal function is network access control/cybersecurity.
Suggested HS code	8471.49.90 or 8517.62.49 depending on the device nature; 8471.30.90, 8471.41.90 and 8517.62.43 should be reviewed only when the actual configuration/model matches Appendix I of Circular 10/2022/TT-BTTTT	Review catalogue, datasheet, CPU/storage configuration, network ports, NAC functions and actual import mode.
Suggested taxes	General import duty 5%; MFN duty 0%; VAT 10%; FTA duty may be 0% with valid C/O	Verify tariff schedule, C/O and goods condition on the customs declaration date.
Specialized policy	May fall under cybersecurity products subject to import license; civil cryptography review may arise if dedicated encryption/VPN/key management exists	Do not conclude based only on the name “NAC”; review model, functions and technical files.
Key technical files	Catalogue, datasheet, admin guide, user manual, security feature list, license sheet, model list, test report if any, label and serial photos	Clarify whether it is hardware appliance or software license; whether Wi‑Fi/Bluetooth, VPN, encryption, battery/adapter or additional modules are included.

Legal note: This content supports pre-import operational review for NAC. It does not replace a formal classification ruling or specialized licensing conclusion. The importer should verify catalogue, datasheet, model, functions, new/used/refurbished condition, C/O and tariff schedule at the declaration date.

Illustration for Import procedure guide for Network Access Control appliance (NAC) — Illustration of the product group and document review before customs clearance.

SCOPE OF APPLICATION

This article applies to NAC – Network Access Control appliance imported as an independent hardware appliance, commonly used in enterprises, factories, banks, data centers, schools or networks requiring internal access control.

Applicable cases

NAC appliance/gateway deployed in enterprise networks.
Device authentication, user authentication, endpoint posture assessment, access policy enforcement, VLAN/segment policy.
Hardware appliance with software license required to operate NAC functions.

Not automatically covered

Firewall, IPS/IDS, UTM, SIEM, DDoS appliance or Network Monitoring although listed in the same menu group.
Standard server installed with NAC software but imported as a server/ADP machine.
License, subscription or virtual appliance without accompanying physical goods.

Cases requiring separate review

Used/refurbished goods, warranty replacement, sample shipment or project shipment.
Device with VPN, dedicated encryption, key management, TLS inspection or special cybersecurity module.
Device with Wi‑Fi/Bluetooth/4G/5G, battery, adapter, charger or radio module.

Application principles

Do not group all network security appliances into one policy conclusion.
Review according to catalogue, datasheet, model and actual import purpose.
Specialized policy depends on functions, specifications and technical documents.

CLASSIFICATION & TECHNICAL IDENTIFICATION

NAC is commonly identified by technical descriptions such as network access control, endpoint admission control, policy enforcement, RADIUS/TACACS+ authentication, 802.1X, guest access, device profiling, posture assessment or integration with switches/firewalls/identity servers. Determine whether the imported item is a dedicated appliance, general-purpose server, expansion module or software/license.

Criteria to check	Documents to compare	Risk if described incorrectly	Suggested goods description on documents/declaration
Principal function	Catalogue, datasheet, admin guide, feature list	Generic description such as “server/network device” may cause wrong HS and policy review	Network Access Control appliance, model…, used to authenticate and control network access.
Hardware configuration	Datasheet, port photos, CPU/RAM/storage, number of Ethernet ports	May be classified as server/ADP or another network device	State hardware appliance, network ports, power supply and accessories.
Security features	Security feature matrix, license sheet, whitepaper	Cybersecurity license or civil cryptography review may be missed	Declare NAC function clearly; separately review VPN/encryption/key management if any.
Goods condition	Contract, invoice, goods photos, serial list	Used/refurbished IT goods may trigger additional import restrictions	State brand-new condition only when supported by documents.
Accessories/license	Packing list, license sheet, user manual	License/accessories may affect value, item description or policy	List appliance, license, adapter, rail kit and modules by line item if necessary.

HS CODE – DUTY – C/O

For a dedicated NAC network appliance, HS classification should be determined by its data transmission/receiving/processing function and the actual nature of the imported goods. If it is merely a standard server with NAC software or a license/software-only item, it should not automatically use the HS code for a network appliance.

Reference HS code	Conditions for application	Risk if applied incorrectly	Documents to verify
8471.49.90	NAC whose nature is a dedicated automatic data processing system, in system form, integrating processing hardware and NAC software	May be reclassified if the actual goods are a telecommunications/network data transmission device	Catalogue, datasheet, CPU/RAM/storage configuration, OS, license sheet and NAC functions.
8517.62.49	NAC whose nature is network data transmission/receiving/processing apparatus, with network ports and LAN/WAN access processing	May trigger explanation if documents describe it only as a server or software/license-only item	Network port photos, connection diagram, admin guide, datasheet and data transmission function description.
8471.30.90 / 8471.41.90 / 8517.62.43	Review only where the model matches: portable ADP machine, ADP machine in the same housing, or controller/adaptor/connector/bridge/router-like apparatus	Wrong code if classification follows the commercial name “NAC” without checking actual construction	Catalogue, datasheet, BOM, model list, label photos and principal function.
Software/license without hardware	Only software right, subscription or virtual appliance is imported	Incorrect treatment of tangible/intangible goods, value and tax policy	License contract, service/software invoice, payment documents.

Tax item	Suggested rate	Application condition	Documents to check
General import duty	5%	Applied when MFN/FTA conditions are not met under the finalized HS code	Current tariff, customs declaration, HS code.
MFN import duty	0%	Applied to imports from MFN countries/territories and corresponding HS code	MFN tariff, commercial documents.
VAT	10%	Applied to imported goods unless another VAT rule applies at the declaration date	Declaration, customs value, current VAT policy.
Special preferential FTA duty	May be 0%	Only if valid C/O/origin proof, correct form, origin criterion, description and transport route are available	Draft C/O, original/e-C/O, invoice, bill, packing list.

C/O risk: Wrong C/O form, origin criterion, goods description or HS code may cause denial of special preferential duty and post-clearance explanations.

SPECIALIZED POLICY MATRIX

Goods scenario	Potential policy	Documents to check	Authority/portal if identifiable	Recommended timing	Risk note
Standard NAC appliance	Review cybersecurity products subject to import licensing	Catalogue, datasheet, feature list, model list	Competent specialized authority under current regulations; public service portal/NSW if applicable	Before ETA or before purchase/shipment	Do not state “no license required” without reviewing model and functions.
With encryption/VPN/key management	Review civil cryptography and licensed civil cryptography import list	Encryption declaration, admin guide, whitepaper	Government Cipher Authority/competent authority under civil cryptography rules	Before shipment	TLS/VPN/encryption scope should be confirmed by the manufacturer.
With wireless or radio module	Review ICT group 2, conformity/quality inspection if listed	Datasheet, FCC/CE, RF module, test report	ICT/telecom specialized authority if applicable	Before ETA	NAC is usually wired, but models with Wi‑Fi/4G require separate review.
With battery, adapter or charger	Review safety, labeling and relevant standards if applicable	Packing list, adapter label, datasheet	Competent authority for the applicable product group	Before packing/shipping	Accessories may affect labeling documents and policy review.
Used/refurbished goods	Review used IT goods prohibition/conditions	Invoice, contract, serial, photos, goods condition confirmation	Customs and relevant specialized authority	Before purchase	Do not buy used/refurbished goods before policy conclusion.
Imported for EPE/FDI/factory	Review import purpose, declaration type, asset management and post-clearance records	Contract, intended use, asset list, PO	Customs office handling the shipment	Before customs declaration	Different use purposes may require different compliance records.

LEGAL DOCUMENTS TO REVIEW

Document group	Document name/number	Issuing authority	Effective date/application time	Role in procedure	Key articles/appendices to note	Review note
Law	Law on Cyberinformation Security No. 86/2015/QH13	National Assembly	Effective from 01 July 2016	Legal framework for cybersecurity products/services and civil cryptography	Review relevant rules on cybersecurity/civil cryptography based on actual documents	Do not infer licensing without checking the list.
Decree	Decree 108/2016/ND-CP	Government	Effective from 01 July 2016	Regulates business conditions for cybersecurity products and services	Relevant rules on cybersecurity products and conditions	Check amendments/effective status at the application time.
Circular	Circular 13/2018/TT-BTTTT	Ministry of Information and Communications	Effective from 01 December 2018	List of cybersecurity products subject to import license and licensing procedure	Appendix/list of cybersecurity products subject to import license	Review by model and NAC functions.
Amending circular	Circular 10/2022/TT-BTTTT	Ministry of Information and Communications	Effective from 15 September 2022	Amends and supplements Circular 13/2018/TT-BTTTT	Changes to list, procedure and dossier	Use consolidated or cross-checked texts when filing.
Civil cryptography decrees	Decree 211/2025/ND-CP	Government	Effective from 09 September 2025	Framework for civil cryptography activities and related sanctions	Review lists/conditions where NAC has dedicated encryption, VPN, key management or cryptographic modules	Only applies when the model/function falls within civil cryptography scope; do not infer from trade name only.
Tariff	Current import-export tariff schedules	Ministry of Finance/Government	At declaration date	Determine general duty, MFN, VAT and FTA preferential rate	HS code and corresponding tax rates	Verify on the system/tariff schedule on declaration date.

VIEW / DOWNLOAD ORIGINAL LEGAL DOCUMENTS

The importer may search legal documents by number on the official legal document portals, Government portal or the issuing authority’s website. The importer should also cross-check on official legal portals or the issuing authority’s website before application.

Decree 108/2016/ND-CP Circular 13/2018/TT-BTTTT Circular 10/2022/TT-BTTTT Law 86/2015/QH13 Decree 211/2025/ND-CP

CUSTOMS CLEARANCE DOCUMENT SET

Commercial documents

Commercial Invoice.
Packing List.
Bill of Lading/Air Waybill.
Sales Contract/Purchase Order if any.
Certificate of Origin – C/O if preferential duty is claimed.

Technical/specialized documents

Catalogue, datasheet, admin guide, user manual.
Security feature list, license sheet, model/serial list.
Cybersecurity import license if applicable.
Civil cryptography file if dedicated encryption exists.
Labeling file and test report if any.

Document group	Required documents	Used for which step	Usually prepared by	Common errors	Pre-ETA check method
Commercial	Invoice, Packing List, Contract/PO	Customs value, description, quantity	Importer, shipper, sales/docs	Generic description, missing model/serial	Compare line-by-line with catalogue and PO.
Transport	B/L or AWB, arrival notice, pre-alert	D/O, declaration, ETA tracking	Forwarder, agent, docs	Wrong consignee, package/weight mismatch	Check pre-alert before vessel/flight arrival.
Technical	Catalogue, datasheet, admin guide, feature matrix	HS classification, policy, customs explanation	Manufacturer, importer, technical team	NAC/encryption/VPN function not clearly shown	Request official model-specific technical files.
Specialized license	Cybersecurity/civil cryptography license, test report, conformity file if any	Specialized dossier/customs supplement	Compliance/legal/importer	Filed after ETA, model mismatch	Review list and prepare dossier before arrival.
Origin	Draft C/O, original/e-C/O	FTA preferential duty	Shipper, exporter, importer	Wrong form, description, HS	Check draft C/O before issuance.

Cross-checking rule: goods description, quantity, model, serial, origin and specifications must match 100% across commercial documents, catalogue, label, specialized dossier and customs declaration.

DECISION POINTS THAT MAY HOLD THE SHIPMENT

Decision point	Question to answer	Evidence documents	Consequence if unclear	Recommended handling
HS code	Is it a NAC appliance or a server/ADP machine with NAC software?	Datasheet, catalogue, port photos, admin guide	Reclassification request and extended clearance	Prepare classification memo with technical documents.
Cybersecurity license	Is the NAC model listed as a cybersecurity product subject to import license?	Circular 13/2018, Circular 10/2022, datasheet	Shipment may be held pending license	Review by model and function before ETA.
Civil cryptography	Does it have VPN/dedicated encryption/key management?	Encryption declaration, whitepaper, admin guide	Civil cryptography license/dossier may be required	Obtain written confirmation from manufacturer.
Model/serial	Does model on documents match catalogue, label and license?	Invoice, packing list, label, model list, license sheet	Channel inspection, explanation or amended documents	Freeze model list before shipper issues documents.
C/O	Is C/O form, origin criterion, description and HS correct?	Draft C/O, invoice, bill, packing list	FTA duty may be denied	Review draft C/O per line item.
Goods condition	Brand-new, used or refurbished?	Invoice, contract, photos, serial	Used IT goods policy issue	Do not purchase used/refurbished goods before policy review.

PRACTICAL E2E WORKFLOW

Pre-ETA review

Finalize HS code, duties, C/O, labels, goods condition, cybersecurity license, civil cryptography issue if any, and ICT group 2 possibility. For NAC, review access control, authentication and encryption features before booking shipment.

Lock documents and technical files

Cross-check Invoice, Packing List, B/L/AWB, catalogue, datasheet, model list, license sheet and original label. Goods description must be consistent across commercial documents, technical files and declaration.

File specialized license/inspection if applicable

If the model falls under cybersecurity/civil cryptography/ICT group 2 rules, prepare license, test report or conformity dossier before ETA. Do not wait until arrival to ask manufacturer about security functions.

Lodge customs declaration

Green channel may clear under system conditions; Yellow channel reviews documents; Red channel reviews documents and physical goods. Common questions: HS code, value, model, C/O, cybersecurity function and encryption.

Clearance, delivery and post-clearance file

Deliver goods to warehouse, complete supplementary label/conformity mark if applicable, archive shipment files and keep license sheet for post-clearance audit.

PRE-ETA RISK CHECKLIST

Risk	Consequence	Pre-ETA control	Documents to check
Generic description as “server/security appliance”	Wrong HS, wrong license review, supplementary documents	State NAC appliance, model and network access control function	Invoice, packing list, catalogue, datasheet.
No review of cybersecurity import license list	Shipment held for license supplement	Check Circular 13/2018 and Circular 10/2022 by model and function	Datasheet, feature list, legal list.
Encryption/civil cryptography function missed	Civil cryptography review and delayed clearance	Request manufacturer declaration on encryption/VPN/key management	Admin guide, whitepaper, declaration.
Model mismatch across invoice, PL, label and license	Channel inspection and lengthy explanation	Freeze model and serial list before document issuance	Invoice, PL, label, license sheet.
Wrong C/O form or goods description	FTA preferential duty denied	Check draft C/O, origin criterion, HS, description and route	Draft C/O, invoice, bill.
No review of new/used/refurbished condition	Used IT goods policy issue	Confirm goods condition in contract, invoice and label	Contract, invoice, photos, serial.

FAQ – COMMON QUESTIONS

Does NAC import require a license?

It may require review for cybersecurity import licensing if the model is within the regulated list. Do not conclude by product name only; compare model, functions and technical documents.

Is quality inspection/conformity certification required?

Review is required if the device is listed as ICT group 2 or has telecom/radio functions. The conclusion depends on model and specifications.

Is Vietnamese supplementary labeling required?

It may be required when goods are circulated in Vietnam. Label details must match model, origin, manufacturer and responsible entity.

Can C/O reduce duty?

Yes, if the C/O is valid under the relevant FTA, correct in form, origin criterion, goods description and HS code.

Do samples/warranty goods follow the same procedure as commercial imports?

Not automatically. Samples or warranty goods must still be declared correctly by nature, quantity, value, condition and applicable specialized policy.

What if invoice model differs from catalogue?

Request the shipper to amend documents or provide model confirmation before declaration. Do not leave the mismatch until goods arrive at port.

IMPLEMENTATION SUPPORT FROM TGIMEX

This guide provides a map of HS code, duties, documents and specialized policies for NAC. In actual shipments, the importer should still review catalogue, datasheet, model, documents, origin and import purpose.

Support scope

Pre-ETA review: HS code, specialized policy, cybersecurity/civil cryptography license, C/O, tax and labeling.
Cross-check Invoice, Packing List, B/L/AWB, catalogue, test report, license sheet, label and technical documents.
Coordinate international logistics, pre-alert, ETA and customs dossier.

Operational risk control

Prepare customs declaration file and handle Green/Yellow/Red channel questions.
Support explanations on HS code, customs value, origin and specialized policy.
Archive shipment file and review supplementary label/conformity mark if applicable.

For shipments likely to involve specialized inspection, licenses, C/O or labeling requirements, the importer should not wait until cargo arrival to start document review. A small mismatch among Invoice, Packing List, catalogue, datasheet, C/O or label may lead to document supplement requests, delayed clearance or unplanned storage costs.

ELECTRICAL – ELECTRONICS – IT EQUIPMENT

F&B

MACHINERY

HOUSEHOLD GOODS

COSMETICS – PERSONAL CARE