A firewall appliance may be traded as networking equipment, but its export file depends heavily on exact model, routing/gateway functions, wired/wireless configuration, VPN/cryptography, throughput, power supply, firmware and end-use. A generic “firewall” description can misalign HS, control screening or destination-market requirements just before shipment.

This guide follows the E2E map from market scan to post-shipment, focusing on the United States, the EU and China, while locking HS 8517.62, origin/FTA, civil cryptography, strategic trade, Cargo Ready, cut-offs and buyer documentation.

Compilation note: Operational reference for exporters, Procurement, Legal, Compliance, Operations and Documentation teams; sources reviewed through 03 Sep 2026. HS 8517.62 trade-family data are used only as route signals and do not replace the exact 8-digit classification of a specific model.

1. QUICK OVERVIEW

MARKETS

United States · EU · China
Selected from 2023 HS 8517.62 trade routes and materially different compliance regimes.

VIETNAM EXPORT POLICY

Do not infer a licence from “firewall”. Key triggers are VPN/cryptography, dual-use cybersecurity status, strategic-trade parameters, end-user/end-use and radio.

HS – DUTY – VAT

Reference 8517.62.xx
Lock the 8-digit code from principal function/architecture/configuration; review duty and export VAT from the final HS and transaction facts.

ORIGIN / FTA

EU: EVFTA. China: ACFTA/RCEP. No bilateral preferential Vietnam–US FTA. Preference requires the exact PSR and origin evidence.

SPECIALIZED

Decree 341/2026 has applied since 01 Sep 2026. VPN/crypto firewalls require review of Articles 9–10 and Appendix II; dual civil-crypto + cybersecurity products have an MPS licensing route.

ETD / CUT-OFF

Before Cargo Ready lock model/revision, firmware/licence, crypto function, permit/classification status, market evidence, packing and booking data.

TRANSPORT

Air suits high-value/time-sensitive cargo; Sea/LCL can suit larger volume. A battery/UPS accessory requires a separate DG screen.

Quick glossary: Market Access = conditions for lawful market entry/sale; civil cryptography = Vietnam MMDS; CRA = EU Cyber Resilience Act; Cargo Ready = cargo ready for handover; SI/VGM/CY/CFS cut-off = carrier document/weight/handover deadlines.

2. SCOPE & DETAILED PRODUCT CLASSIFICATION

Main scope: complete hardware firewall appliances for enterprise/data-center/branch networks, potentially integrating routing, gateway, IDS/IPS, VPN and management. Virtual firewall licences, boards, wireless gateways and RMA/used units require separate triggers.

Variant	What to check	Evidence	Possible policy/compliance	Application note
Wired firewall appliance	Ethernet/SFP/SFP+/QSFP; firewall/IPS/VPN; no radio	Datasheet, block diagram, port/function matrix, throughput spec	HS 8517.62.xx; Decree-341 civil-crypto/cybersecurity screen where crypto is present; strategic screen; destination compliance	Core scope; name alone does not establish a licence.
Firewall + Wi‑Fi/Bluetooth/4G/5G	Radio module/antenna/cellular modem	Radio module ID, frequency/power, module certificate, BOM	Separate destination radio compliance; HS may need a principal-function review	Split the conclusion where radio becomes material.
VPN / crypto-focused appliance	IPSec/TLS/SSL VPN as primary function; algorithms/key length/encryption throughput	Security datasheet, algorithm statement, VPN throughput	Decree 341 Appendix II; dual civil-crypto + cybersecurity route; China crypto import list if exact criteria match	Test HS + description + crypto characteristics together.
High-performance data-center firewall	High throughput/sessions/new-connection capacity	Performance test/spec, architecture, CPU/ASIC	Performance matters for strategic screening/buyer sizing; do not use the repealed 2017 China firewall thresholds to determine current catalogue scope	The 2023 China catalogue lists firewalls by category/description.
Network security board/card	PCB/card/module rather than complete appliance	BOM, schematic, interfaces, board function	Different HS/policy may apply	Do not copy the appliance HS.
Virtual firewall / software licence	No physical goods or licence/subscription only	Licence agreement, software/service scope	Not a normal physical-goods shipment	Use a software/service workflow.
Used/refurbished / RMA / demo	Used, repair/return, warranty or demo	Serial, condition report, original import/export docs	Different customs regime/value/ownership and buyer acceptance	Lock purpose/value/ownership at the start.

3. EXPORT MARKETS & MARKET ACCESS REQUIREMENTS

3.1. MARKET SCAN

UN Comtrade 2023 data for HS 8517.62 report Vietnam exports of about US$16.3bn; the United States about US$9.4bn, Netherlands US$988m, China US$633m and Germany US$545m. These figures cover the entire six-digit subheading, not firewall appliances alone.

3.2. MARKET ACCESS

The three markets have materially different digital/radio, cybersecurity, cryptography and end-use controls. FIPS, Common Criteria/ISO 15408 and penetration testing are buyer/industry requirements unless a specific legal/procurement rule makes them mandatory.

3.3. PRODUCT / LABELLING / TRACEABILITY

Market	Fit level	Market Access	Product/company requirements	Documents/data
United States	High – largest 2023 HS 8517.62 route	No bilateral preferential Vietnam–US FTA. Review FCC Part 15 for digital devices; radio authorization for transmitters. Review EAR/ECCN/FDP only if the item is actually subject to the EAR.	Exact model, wired/wireless, FCC route, origin, end-user/end-use; FIPS 140-3 when required by federal/buyer procurement.	Datasheet, port/radio specs, FCC evidence if available, origin file, EAR/end-use file where relevant.
EU (Netherlands/Germany routes)	High	Review EMC, LVD where voltage scope applies, RED if wireless and RoHS. A product whose core functionality is a firewall is CRA Annex III Class II.	CRA Article 14 reporting applies from 11 Sep 2026; the Regulation generally applies from 11 Dec 2027; Class II is tied to mandatory third-party conformity assessment under the applicable CRA route.	EU DoC/technical file for actual legislation; firmware/SBOM/vulnerability records; exact model/revision and support-period data.
China	Medium–high	The 2023 network-security product catalogue lists firewalls by category/description. From 1 Jul 2023, listed products must be security-certified or security-tested by a qualified institution before sale/provision.	Keep cybersecurity catalogue requirements separate from commercial-cryptography import licensing. The 2026 import directory includes encrypted VPN equipment when IPSec/SSL VPN is the primary function and the listed crypto/throughput criteria are met.	Exact product description, local importer route, certification/test evidence; VPN primary-function statement, algorithms/key length, encrypted communication rate and commercial docs.

Important correction: the current 2023 China catalogue no longer uses the old 2017 firewall throughput/concurrent/new-session thresholds. Those old thresholds must not be used as the current catalogue test.

WTO / UN COMTRADE – VIETNAM CHINA SECURITY PRODUCT RULE EU CRA

4. VIETNAM EXPORT POLICY / CONDITIONS

Goods scenario	Possible policy	Basis to review	Authority/channel	Trigger
Standard commercial firewall	Normal foreign-trade/customs route; no licence inferred from the product name	Foreign Trade Management Law; Decree 69/2018 through 04 Sep 2026; Decree 292/2026 from 05 Sep 2026	Customs; specialized authority if triggered	Exact model, HS, function, condition, destination.
VPN/crypto firewall – civil-crypto product in Appendix II	Civil-cryptography export/import licence where exact product is listed	Decree 341/2026, effective 01 Sep 2026; Art.9(1),(3), Art.10, Appendix II, Forms 05–06 Appendix III	Government Cipher Committee for the Decree-341 civil-crypto route	HS + goods description + cryptographic technical characteristics all match.
Dual civil-cryptography + cybersecurity firewall	Cybersecurity-product export/import licensing route; MPS consults Government Cipher Committee on cryptographic function	Art.9(4) Decree 341/2026 and relevant Appendix-II notes	Ministry of Public Security with Cipher Committee consultation	Exact product has both civil-cryptography and cybersecurity functions.
Dual-use parameters / sensitive end-use	Strategic-trade screening; permit/control if an exact controlled entry matches	Decree 259/2025; Circular 42/2026/TT-BCT from 12 Sep 2026	MOIT / competent authority	Technical parameters, destination, end-user/end-use.
Wireless firewall	Separate radio/market compliance by destination	Exact configuration and destination	Destination authority	Wi-Fi/Bluetooth/cellular/radio module.
RMA/repair/demo/used	Review customs regime, value, ownership and purpose	Current customs rules	Customs	Return/repair/warranty/demo/used.

NEW CURRENT CIVIL-CRYPTO FRAMEWORK: on the article date 03 Sep 2026, Decree 341/2026 is already effective from 01 Sep 2026. Article 18 provides transitional treatment for existing licences and pending applications. New files should therefore not use Decree 211/2025 as the current procedural basis.

LICENCE PROCEDURE: Article 10 uses one application set with Form 05 Appendix III, submitted through the Article 5(3) channels. The validity check is 1 working day; after a complete valid file is received, appraisal/issuance is 6 working days. This is the statutory procedure time, not a promise for total shipment lead time.

5. HS CODE – EXPORT DUTY – EXPORT VAT

For a complete hardware firewall whose principal function is receiving/converting/transmitting or regenerating network data, the reference family is commonly 8517.62. The 8-digit code must be determined from architecture and principal function.

Product/variant	Reference HS	Classification basis	Export duty	Export VAT	Evidence
Wired firewall appliance	8517.62.xx	Machines for reception/conversion/transmission/regeneration of data with switching/routing/gateway/security functions	Check effective export tariff by final HS	0% only where conditions/evidence are met	Datasheet, block diagram, port/function matrix, invoice description.
Integrated firewall/router/gateway	8517.62.xx – 8-digit branch may differ	Principal function and integrated architecture	By final HS	By transaction file	Routing/switching/firewall feature matrix, architecture.
Wireless security gateway	Separate review	Radio may change classification/compliance	By final HS	By transaction file	Radio module, frequency/power, network function.
Bare network-security board/card	Separate classification	Not a complete appliance	By final HS	By transaction file	BOM, schematic, interfaces, board function.
Virtual firewall/software	Not treated under a normal physical-goods HS shipment	No physical appliance	Not a normal goods shipment	By service/software transaction	Contract/licence scope.

EXPORT DUTY

CONCLUSION: Do not mechanically state “firewall export duty = 0%”. Lock the 8-digit HS first.

LEGAL BASIS: Check Decree 26/2023 and effective amendments. Decree 201/2026, effective 23 Jul 2026, applies only where the final HS is actually within the amended goods.

ACTION: Retain the classification memo, datasheet and tariff check used on the declaration date.

EXPORT VAT

CONCLUSION: 0% VAT is not automatic merely because goods are exported.

LEGAL BASIS: Review Decree 181/2025 and effective amendments, including Decree 144/2026.

ACTION: Check contract, payment, customs declaration and export evidence for the actual transaction.

6. ORIGIN – FTA – RULES OF ORIGIN

A firewall appliance has a complex electronics BOM: mainboard/PCB, CPU/SoC/ASIC, NIC/PHY, memory, secure element/TPM, PSU, enclosure and firmware. Claim origin preference only after the exact HS, FTA and PSR are confirmed.

Route	FTA/agreement	Origin proof	PSR	Other conditions	Evidence
Vietnam → EU	EVFTA	EUR.1 / applicable proof mechanism	Check exact PSR by final HS under Circular 14/2026/TT-BCT	Agreement transport/document conditions	BOM, supplier declarations, imported-input declarations, production records, origin calculation.
Vietnam → China	ACFTA / RCEP	Form E or appropriate RCEP proof	Check exact PSR and agreement HS version	Direct consignment/third-party invoice where applicable	BOM, origin of mainboard/IC/modules, supplier docs, production records.
Vietnam → United States	No bilateral preferential FTA	Non-preferential COO/proof as required	No bilateral preferential PSR	U.S. origin/marking rules and transaction facts	Assembly/test process, COO memo, supplier origin, commercial docs.

ORIGIN CHECKLIST: exact HS/HS version; form/proof; PSR; third-party invoice if any; direct consignment if any; description/model; quantity/weight; origin criterion; date/signature/e-data; buyer/importer requirements.

ORIGIN AUDIT TRAIL: BOM, norms, material invoices/COs, imported-component declarations, supplier declarations, PCB/mainboard/CPU/ASIC/radio/secure-element origin, assembly/test/firmware-loading records, inventory, production batch and RVC/CTC worksheet where applicable. Final assembly in Vietnam alone does not automatically create Vietnamese origin.

7. PRODUCT-SPECIFIC COMPLIANCE

Trigger	Possible procedure/document	What to check
VPN/cryptography	Decree 341 Arts.9–10 and Appendix II; civil-crypto licence if listed; dual civil-crypto + cybersecurity product requires the MPS route analysis	HS + goods description + crypto characteristics; IPsec/TLS VPN, algorithms/key length and exact function.
Sensitive/dual-use parameters	Strategic-trade classification/end-use screening; permit if an exact controlled entry matches	Technical parameters, architecture, destination, end-user/end-use.
United States	FCC Part 15 digital-device route; radio authorization for transmitters; EAR only if subject to the EAR	Wired/wireless, radio module, U.S.-origin content/technology, end-user/end-use.
EU	EMC/LVD/RED/RoHS by configuration; CRA firewall core functionality = Annex III Class II	Voltage/radio, software/firmware, vulnerability process; Art.14 from 11 Sep 2026 and main CRA from 11 Dec 2027.
China – cybersecurity product	Firewall category in 2023 catalogue; security certification or qualified security testing before sale/provision	Exact product against current catalogue description; do not apply repealed 2017 performance thresholds.
China – commercial cryptography	Importer-side licence when exact encrypted-VPN equipment matches the 2026 import directory	IPSec/SSL VPN primary function, listed algorithm/key-length criteria and encrypted communication rate; China reference customs codes 8517622920/8517623920.
Transport	ESD/moisture/impact controls; separate DG screen for lithium/UPS accessories	Battery chemistry/Wh, accessories and packing.

8. EXPORT DOCUMENT SET & SUBMISSION CHANNELS

File group	Documents	Used for	Typical owner	Data to match	Common error
Commercial	Contract/PO, Commercial Invoice, Packing List	Customs, booking, buyer/bank	Sales/Docs/Exporter	Model/P/N, revision, qty, price, Incoterm, package, origin representation	Invoice says only “firewall”; model/licence bundle wrong.
Customs	Export declaration and regime/policy documents	Export clearance	Customs/Docs	HS, description, value, quantity, origin, regime	Trade-name classification; insufficient description.
Technical/compliance	Datasheet, block diagram, crypto statement, end-user/end-use, civil-crypto/strategic file if triggered	Classification, permit/control, explanation	Engineering/Compliance/Supplier/Sales	Exact model, throughput, crypto, radio, firmware	Brochure lacks thresholds; wrong model spec.
Market/buyer compliance	FCC/CE/DoC/test reports, China certification/test, FIPS/CC if contracted	Market/buyer acceptance	QA/Compliance/Engineering	Exact model/revision/firmware and test scope	Certificate family does not cover exact revision.
Origin	C/O/proof, BOM, supplier declarations, production records, origin calculation	FTA/COO claim	Factory/Procurement/Docs	HS version, criterion, invoice/shipment data	No audit trail; origin inferred from assembly.
Transport & buyer	Booking, SI, VGM if sea, AWB/B/L, packing/serial list, L/C docs if any	Shipping/post-shipment/payment	Forwarder/Docs/Finance/Warehouse	Shipper/consignee, package, weight, marks, serials	Missed cut-off; transport/serial mismatch.

SUBMISSION CHANNELS: customs through the current Vietnam electronic-customs route; civil-cryptography files, where in scope, through the Government Cipher Committee’s direct/post/online procedure; origin proof through the applicable agreement/issuing mechanism. State a specific portal only after the exact procedure is confirmed.

9. LEGAL / MARKET REFERENCE MATRIX

Layer	Rule/source	Authority	Effective timing	Article/annex	Application	Old → new / note
Vietnam – foreign trade	Decree 69/2018 → Decree 292/2026	Government	Decree 292 from 05 Sep 2026	Arts.64–65	Foreign-trade framework and transition	Use the regime in force on the processing date and the statutory transition.
Vietnam – civil cryptography / cybersecurity dual-use	Decree 211/2025 (prior framework) → Decree 341/2026	Government	01 Sep 2026	Arts.9–10, 17–18; Appendix II; Forms 05–06 Appendix III	Licence where triple-match applies; MPS route for dual civil-crypto + cybersecurity products	Decree 341 is the current procedural basis on 03 Sep 2026; Art.18 governs transition.
Vietnam – strategic trade	Decree 259/2025; Circular 42/2026	Government / MOIT	Circular 42 from 12 Sep 2026	Detailed technical list	Item/end-use/end-user/destination screen	Circular 42 is not yet effective on 03 Sep 2026.
Vietnam – export duty	Decree 26/2023; Decree 201/2026	Government	Decree 201 from 23 Jul 2026	Export Tariff	Duty after final HS	Apply only where final HS is within amended scope.
Vietnam – VAT	Decree 181/2025 and amendments incl. Decree 144/2026	Government	Decree 144 from 20 Jun 2026	Export 0% conditions	Transaction VAT	0% is conditional, not automatic.
EVFTA origin	Circular 11/2020 + 41/2022 → Circular 14/2026/TT-BCT	MOIT	10 May 2026	EVFTA PSR/annexes	Origin/C/O	Use current rule and the exact PSR.
United States	FCC Part 15; EAR if subject to EAR	FCC / BIS	Current	47 CFR Part 15; Cat.5 Pt.2/ENC where applicable	Digital/radio compliance; re-export control	Do not assume every Vietnam firewall is subject to the EAR; FIPS is not a general import licence.
EU	EMC/LVD/RED/RoHS; Regulation (EU) 2024/2847 CRA	EU	Art.14 from 11 Sep 2026; main CRA from 11 Dec 2027	Article 71; Annex III Class II	Cybersecurity lifecycle/conformity route	Firewalls with firewall core functionality are Class II.
China – cybersecurity product	2023 Announcement No.2 catalogue + 12 Apr 2023 security-management announcement	CAC / MIIT / MPS / CNCA and relevant authorities	Catalogue 2023; rule from 1 Jul 2023	Category 防火墙 (firewall)	Security certification or qualified security testing before sale/provision	2023 catalogue replaced the 2017 catalogue; old firewall performance thresholds are no longer the current scope test.
China – commercial cryptography	Commercial Cryptography Regulation + 2026 dual-use import licensing directory	State Council / MOFCOM	Current 2026	Encrypted VPN equipment item	Importer-side licensing when exact criteria match	Separate from the cybersecurity-product certification/test layer.

BLOCKER

Wrong firmware/licence delivered; origin/certificate mismatch; serial cannot be traced during claim/audit.

11. TIMELINE BEFORE ETD / CARGO READY / CUT-OFF

Milestone	What must be locked	Documents/data	Typical owner	Risk if late
Before Contract	Market Access, preliminary HS, civil-crypto/strategic triggers, FTA, Incoterm, payment	Datasheet, buyer requirements, crypto/radio specs, destination, end-use, origin input	Sales/Compliance/Engineering	Order accepted but market/control requirement cannot be met.
Before Cargo Ready	Permit/classification if any; FCC/CE/China evidence; label/serial; origin; packing; booking	Certificates/DoC/tests, origin file, serial list, packing data	Factory/QA/Docs/Compliance/Forwarder	Goods ready but documentation missing; relabel/reflash/repack needed.
Before CY/CFS cut-off / cargo acceptance	Customs, trucking/pickup, gate-in/air handover, package/weight	Declaration, booking, PL, handling data, VGM if applicable	Ops/Customs/Forwarder/Warehouse	Missed cut-off/flight, roll/rebooking/storage.
Before SI/VGM cut-off	B/L/AWB master data, shipper/consignee, package, weight, marks	SI, VGM if sea, shipment master data	Docs/Forwarder	Amendment/discrepancy; origin/bank documents no longer align.
After on-board	Origin proof/certificates, Final B/L/AWB, buyer/bank set, payment, archive	On-board data, final transport doc, origin proof, certificates	Docs/Finance/Compliance	Late documents/payment; weak audit trail/serial traceability.

Note: do not invent lead-time day counts. State a specific processing time only where an official source or confirmed carrier/buyer data supports it.

12. INCOTERMS – TRANSPORT – PACKING – COST

FCA: often suitable for Air where the exporter hands goods to the carrier/forwarder at the agreed point; define export-customs/local handling responsibilities.
FOB/CFR/CIF: use for sea/inland-waterway transport, not mechanically for Air.
CPT/CIP: useful where the exporter books carriage; under CIP understand insurance and risk-transfer points.
DAP/DDP: use only where importer-side customs/tax/compliance can actually be controlled; cybersecurity equipment can increase destination-side obligations.
Packing: carton/pallet/wooden case where needed, anti-static bag, moisture protection, shock indicator where appropriate; ISPM 15 where wooden packaging is in scope.

Cost group	Control point	Risk
Compliance/certification	Civil-crypto/strategic classification, FCC/CE/China tests/certification, buyer FIPS/CC where contracted	Late cost if exact revision/firmware is outside scope.
Packing	Anti-static, moisture, shock, serial control, pallet/wood packaging	Damage or serial/package mismatch.
Freight/local charges	Air/Sea, pickup/trucking, terminal/CFS, security handling	Rebooking/storage from missed cut-off.
Insurance	High unit value; read exclusions for electronics/cyber/data loss	Under-insurance or uncovered claim.
Origin/C/O	Origin audit trail and certification effort	C/O issued but PSR fails or no tariff benefit arises.
Post-shipment	Bank discrepancy, courier docs, claim/RMA/firmware issue	Payment delay and reverse-logistics cost.

INCOTERMS: do not confuse the transfer of RISK with the transfer of COST; do not publish absolute local-charge amounts without a quotation.

13. RISKS & CONTROL POINTS

Risk	Root cause	Impact	Control point	When
Wrong 8517.62.xx classification	Trade-name classification; appliance/router/gateway/wireless/board not distinguished	Customs/origin/policy correction	Exact-model classification memo + function/port matrix	Before customs filing
Wrong Decree-341 licensing route	Old Decree 211 logic retained; triple-match and dual cybersecurity status not tested	Wrong authority/licence or late permit	Decree 341 Arts.9–10 + Appendix-II sheet; determine Cipher Committee vs MPS route	Pre-contract/classification
U.S. FCC/EAR mismatch	Wireless module or U.S.-origin content/technology missed	Buyer/importer hold or compliance escalation	Wired/wireless split + FCC route + EAR/end-use screen where applicable	Before Cargo Ready
EU CRA Class-II mapping missing	Generic CE file only; firewall core-function and vulnerability lifecycle not mapped	Readiness gap for reporting/conformity obligations	CRA Art.71 + Annex III; technical file + firmware/SBOM/vulnerability process	Pre-contract / before release
China cybersecurity and crypto layers mixed	Repealed 2017 firewall thresholds used, or encrypted-VPN licence criteria used as the cybersecurity catalogue test	Wrong certification/licensing route	Two checklists: 2023 firewall catalogue/cert-test vs 2026 encrypted-VPN import list	Pre-contract / before booking
Origin fails PSR	Vietnam assembly treated as enough; core imported inputs and audit trail not tested	Preference denied / verification	Origin Audit Trail + exact PSR	Before origin application
Firmware/licence/serial mismatch	Hardware, licence SKU and certificate revision differ	Buyer rejection/payment hold	Model–serial–firmware–licence–certificate matrix	Cargo Ready / post-shipment
Missed cut-off / transport discrepancy	Customs/booking/SI/VGM/handover late	Roll/rebooking/storage/delay	Carrier milestone + four-eye Draft→Final	Before cut-off/on-board

14. FAQ

1. Can a firewall appliance be exported from Vietnam?

Yes, subject to exact model, HS, cryptography/radio, condition, destination and end-user/end-use review.

2. What is the reference HS family?

For network-data reception/conversion/transmission as principal function, the reference family is commonly 8517.62.xx; the 8-digit code requires actual architecture and datasheet review.

3. Does IPSec/TLS/SSL VPN automatically require a Vietnam civil-crypto licence?

No. Under Art.9(3) Decree 341/2026, HS, goods description and cryptographic technical characteristics must all match. A dual civil-crypto + cybersecurity product requires the Art.9(4) MPS route review.

4. What is the current legal basis for a civil-crypto export/import licence?

On 03 Sep 2026 it is Decree 341/2026, effective 01 Sep 2026. Article 10 uses one application set with Form 05 Appendix III; once valid and complete, statutory appraisal/issuance is 6 working days.

5. Does a U.S.-bound firewall need FCC authorization?

A digital device may fall under Part 15; a Wi-Fi/Bluetooth/radio transmitter adds a separate radio-authorization trigger. Review the exact configuration.

6. Is FIPS 140-3 a general U.S. import requirement?

No. It is commonly a federal procurement or buyer requirement for cryptographic modules, not a general import licence for every firewall.

7. How does the EU CRA classify firewalls?

A product whose core functionality is a firewall is listed in Annex III Class II. Article 14 reporting starts 11 Sep 2026; the CRA generally applies from 11 Dec 2027.

8. Does China use firewall throughput thresholds for the current cybersecurity catalogue?

No. The 2023 catalogue lists firewalls by category/description; the old 2017 performance thresholds are not the current catalogue scope test.

9. Does every VPN firewall entering China need a commercial-cryptography import licence?

No. The 2026 directory covers encrypted VPN equipment where IPSec/SSL VPN is the primary function and the listed cryptographic and encrypted-communication-rate criteria are met. This is separate from cybersecurity certification/testing.

10. Is a C/O required?

It depends on the destination and tariff strategy. EVFTA or ACFTA/RCEP may be relevant only when the exact PSR and origin evidence are satisfied.

11. Are RMA/demo shipments identical to commercial sales?

Not necessarily. Ownership, purpose, declared value, original shipment data and customs regime may differ.

12. What should be retained post-shipment?

Customs, final transport documents, origin trail, Decree-341/strategic files where triggered, FCC/CE/CRA/China evidence, model–serial–firmware–licence mapping, buyer/bank/payment and claim/RMA records.

15. POST-SHIPMENT OUTPUT & RECORD RETENTION

Export customs declaration and exact-model technical classification memo.
Final B/L/AWB/Sea Waybill and booking/cut-off/handover records.
Origin proof/C/O + Origin Audit Trail where applicable.
Civil-crypto/strategic classification, licence/end-use file where triggered.
FCC/CE/DoC/test/China certification or buyer-compliance records by market and exact configuration.
Model–serial–hardware revision–firmware–licence–certificate mapping.
Packing/ESD/moisture/shock records and battery/DG file if any.
Contract/PO, Invoice, Packing List, payment, debit/credit note, claim/RMA/survey if any.

CORRECT OUTPUT is not merely “customs cleared” or “on-board”. The file must prove that the buyer received the correct model/firmware/licence, destination compliance is traceable, origin has evidence and payment is not held by document discrepancies.

SOLUTIONS FROM TGIMEX

For firewall appliances, lock exact model → HS → crypto/radio trigger → Market Access → origin → shipment milestones early to avoid permit/certificate or amendment issues near ETD.

Review HS and Vietnam export policy by exact configuration.
Review civil cryptography/strategic trade, FCC/CE/China compliance and buyer requirements before Cargo Ready.
Control Origin Audit Trail, Invoice–PL–SI–origin–B/L/AWB and the model–serial–firmware–licence matrix.
Coordinate booking, customs, packing, cut-offs and post-shipment through one E2E timeline.

ELECTRICAL – ELECTRONICS – IT EQUIPMENT

F&B

MACHINERY

HOUSEHOLD GOODS

COSMETICS – PERSONAL CARE

ELECTRICAL – ELECTRONICS – IT EQUIPMENT

F&B – FOOD & BEVERAGE

MACHINERY

HOUSEHOLD GOODS

COSMETICS – PERSONAL CARE

EXPORTING FIREWALL APPLIANCES FROM VIETNAM

1. QUICK OVERVIEW

2. SCOPE & DETAILED PRODUCT CLASSIFICATION

3. EXPORT MARKETS & MARKET ACCESS REQUIREMENTS

3.1. MARKET SCAN

3.2. MARKET ACCESS

3.3. PRODUCT / LABELLING / TRACEABILITY

4. VIETNAM EXPORT POLICY / CONDITIONS

5. HS CODE – EXPORT DUTY – EXPORT VAT

EXPORT DUTY

EXPORT VAT

6. ORIGIN – FTA – RULES OF ORIGIN

7. PRODUCT-SPECIFIC COMPLIANCE

8. EXPORT DOCUMENT SET & SUBMISSION CHANNELS

9. LEGAL / MARKET REFERENCE MATRIX

10. PRACTICAL E2E EXPORT WORKFLOW

PRODUCT SCOPE + MARKET SCAN

LOCK HS – POLICY – FTA/ORIGIN

CONTRACT + BUYER REQUIREMENTS

COMPLETE COMPLIANCE / SPECIALIZED FILE

BOOKING – PACKING – TRUCKING

FILE EXPORT CUSTOMS

SI – VGM – CY/CFS CUT-OFF – LOADING

FINALIZE POST-SHIPMENT FILE

11. TIMELINE BEFORE ETD / CARGO READY / CUT-OFF

12. INCOTERMS – TRANSPORT – PACKING – COST

13. RISKS & CONTROL POINTS

14. FAQ

1. Can a firewall appliance be exported from Vietnam?

2. What is the reference HS family?

3. Does IPSec/TLS/SSL VPN automatically require a Vietnam civil-crypto licence?

4. What is the current legal basis for a civil-crypto export/import licence?

5. Does a U.S.-bound firewall need FCC authorization?

6. Is FIPS 140-3 a general U.S. import requirement?

7. How does the EU CRA classify firewalls?

8. Does China use firewall throughput thresholds for the current cybersecurity catalogue?

9. Does every VPN firewall entering China need a commercial-cryptography import licence?

10. Is a C/O required?

11. Are RMA/demo shipments identical to commercial sales?

12. What should be retained post-shipment?

15. POST-SHIPMENT OUTPUT & RECORD RETENTION

RELATED ARTICLES

Network switch

Router / Gateway

Cryptographic equipment

SOLUTIONS FROM TGIMEX

Share this:

Like this:

Có liên quan

Trà Giang JSC

NEED TO REVIEW IMPORT PROCEDURES OR A SHIPPING PLAN?

Leave a ReplyCancel reply

Discover more from TGIMEX VIETNAM JSC