Main Categories

The present document specifies technical characteristic and methods of measurements for Very Small Aperture 
Terminal (VSAT) equipment which has the following characteristics: 
• the VSAT is operating in one or more frequency ranges within the following bands allocated to the Fixed 
Satellite Service (FSS), shared with other services, e.g. the Fixed Service (FS) and the Mobile Service (MS): - - - 
5,850 GHz to 7,075 GHz (Earth-to-space); 
3,400 GHz to 4,200 GHz (space-to-Earth); 
4,500 GHz to 4,800 GHz (space-to-Earth); 
• the VSAT uses linear or circular polarization; 
• the VSAT operates through a geostationary satellite at least 2° away from any other geostationary satellite 
operating in the same frequency band and covering the same area; 
• the VSAT antenna diameter does not exceed 7,3 m, or equivalent effective area; 
• the VSAT is either: - - - 
a transmit-only VSAT: designed for transmission-only of radio-communications signals in the frequency 
band (earth-to-space) specified in the present clause; or 
a transmit-and-receive VSAT: designed for transmission-and-reception of radio-communications signals 
in the frequency bands specified in the present clause; or 
a receive-only VSAT: designed for reception-only of radio-communications signals in the frequency 
band (space-to-Earth) specified in the present clause; 
• the VSAT is designed for unattended operation; 
• the VSAT is operating as part of a satellite network (e.g. star, mesh or point-to-point) used for the distribution 
and/or exchange of information between users; the VSAT is controlled, and monitored for the transmit 
functionality, by a Centralized Control and Monitoring Facility (CCMF). The VSAT has to implement Control 
and Monitoring Functions with either Class A or Class B (structures of the radio states). The specifications 
associated to the CCMF facility are outside the scope of the present document. 
The present document applies to the VSAT with its ancillary equipment and its various terrestrial ports, and when 
operated within the boundary limits of the operational environmental profile defined for the intended use of the VSAT 
including all equipment as brought to the market. 
The present document does not contain any requirement, recommendation or information about the installation of the 
VSAT. 
All parts of the indoor unit related to reception, processing and presentation of the received information except the 
control channel are not within the scope of the present document. The syntax of the control channel messages is outside 
the scope of the present document. The present document is intended to cover the provisions of Directive 2014/53/EU 
(Radio Equipment Directive) [i.5] article 3.2.  
NOTE: The relationship between the present document and essential requirements of article 3.2 of 
Directive 2014/53/EU [i.5] is given in annex A.

The present document specifies vulnerability handling activities, technical requirements and corresponding assessment 
criteria for firewalls, intrusion detection systems, and intrusion prevention systems related to cybersecurity. The 
products with digital elements in scope: 
• are specified within the "technical description" of the "category of product" in Class II, point 2 by the 
Commission Implementing Regulation (EU) 2025/2392 [i.2] of 28 November 2025 on the technical 
description of the categories of important and critical products with digital elements pursuant to Regulation 
(EU) 2024/2847 of the European Parliament and of the Council [i.1] as: - - - 
"Firewalls are products with digital elements that protect a connected network or system from 
unauthorised access by monitoring and restricting data communication traffic to and from that network. 
This category includes but is not limited to network firewalls and application firewalls such as web 
application firewalls or filters and anti-spam gateways."; 
"Intrusion detection systems are products with digital elements that monitor traffic once it has entered the 
network environment for suspicious activity and detect or identify that an intrusion has been attempted, 
is occurring, or has occurred on a connected network or system. 
This category includes but is not limited to network-based intrusion detection systems and host-based 
intrusion detection systems."; 
"Intrusion prevention systems are products with digital elements composed of an intrusion detection 
system that actively responds to an intrusion to a connected network or system. 
This category includes but is not limited to network-based intrusion prevention systems and host-based 
intrusion prevention systems."; 
• are only covered within the product context described in clause 4. 
The present document covers those products to demonstrate compliance with the essential cybersecurity requirements 
of Regulation (EU) 2024/2847 [i.1], Annex I Part I, under the conditions identified in Annex A. 
Firewalls, intrusion detection systems, and intrusion prevention systems fall within the scope of the present document, 
whether deployed as physical appliances or software. The present document applies when the intended purpose or 
reasonably foreseeable use involves monitoring, analysing, or controlling network traffic for security purposes. 
Products that detect access attempts made without authorisation, identify malicious activity, or enforce traffic controls 
to protect networks and systems from intrusions are within scope. 
Firewalls, intrusion detection systems, and intrusion prevention systems intended for use in the industrial OT 
(Operational Technology) domain are excluded from the scope of the present document, see prEN 50770-1 [i.7]. 
The present document does not specify how products detect threats, classify traffic, or implement inspection algorithms. 
Detection accuracy rates, false positive thresholds, and signature effectiveness metrics are outside scope. Security 
requirements for the robustness of protocol parsing engines, the integrity of inspection processes, and vulnerability 
management remain within scope.