genuscreen Virtual: First Virtualized Firewall & VPN Gateway Solution With BSI Approval For Classification Level German VS-NfD

  • Virtualized firewall & VPN gateway with BSI approval
  • Supports widely used hypervisors KVM and VMware ESXi 8.x
  • Highly secure mobile workstations with VPN Software Client genuconnect

Kirchheim (Germany), October 8, 2025 – genuscreen Virtual is the first virtualized packet filter firewall and VPN gateway solution to be granted full approval from the German Federal Office for Information Security (BSI) for the processing of classified information with the classification levels German VS-NfD, NATO RESTRICTED, and EU RESTRICTED/RESTREINT UE. With this "made in Germany" product, the German IT security specialist genua GmbH, a company of the Bundesdruckerei Group, supports companies and organizations in setting up secure IT infrastructures which comply with the classification level German VS-NfD and which can be scaled more easily than before.

When setting up their digital infrastructures, users benefit from the flexibility and efficient scalability that the virtualized solution genuscreen Virtual offers. This can be operated on on-premises virtualization servers or integrated into existing cloud computing environments – often without the need for additional hardware investments. genuscreen Virtual is optimized for the hypervisors KVM and VMware ESXi 8.x.

Needs-Based Scaling of Remote Work Environments 

The layer 3 packet filter firewall of genuscreen Virtual protects IT infrastructures effectively against unwanted access. It is supported by the individually configurable GEO IP filter function, which targetly blocks IP addresses of selected geographical regions.

The integrated VPN gateway in combination with the easy-to-use VPN Software Client genuconnect enables secure mobile workstations to be set up quickly. This allows remote work environments to be scaled as required. genuscreen Virtual also works with VPN clients of other manufacturers, such as the ECOS SecureBootStick SX as well as iPhones and iPads in Apple Indigo setups.

Temporary Identities for Secure Server Authentication

genuscreen Virtual automatically creates temporary identities (TI) as BSI-tested server authentication for thousands of concurrent accessing clients – this reduces the administration workload and increases security. Moreover, the virtualized genuscreen solution is suitable for highly secure site-to-site coupling via VPN.

Depending on the deployment scenario, this enables genua to provide customized firewall and VPN gateway solutions:

  • genuscreen Virtual – Is ideal in cases where high flexibility, scalability and integration into a virtualization or cloud environment are required – and at the same time the highest possible level of network security is to be achieved.

  • genuscreen – On the functionally identical firewall and VPN appliance, the genuscreen software runs as the only application on dedicated hardware. The solution offers maximum security, has BSI approval and is certified according to Common Criteria (CC) EAL 4+ – the highest level that can be used on a complex system such as a firewall. It is also suitable for environments in which no virtualization host is available.

Both variants can be configured and managed centrally via the Central Management Station genucenter. Uniform web user interfaces, command line interfaces and programming interfaces (CLI and API) make it much easier to manage and monitor mixed virtual and physical installations.

Presentation of Approval Certificate at it-sa 2025

At the leading IT security trade fair it-sa Expo&Congress 2025, Dr. Christopher Basting, Head of Department at the BSI, and Dirk Jung, Departmental Head (Department V12 – Restricted Classification Approvals and Systemic Releases) at the BSI, presented Marc Tesch, Managing Director of genua, with the approval certificate. Mr. Jung emphasized: "Secure scalable IT infrastructures are an essential basis for modern everyday working life. The approval shows that high security needs and these requirements go together well."

"The BSI approval to the classification level German VS-NfD for genuscreen Virtual confirms that our solution meets the strictest German information protection requirements," said Marc Tesch, Managing Director of genua. "Security-sensitive organizations benefit from the flexibility and scalability of a virtualized solution when networking their sites and setting up secure hybrid workstations. At the same time, thanks to a fully 'Made in Germany' security infrastructure, they are independent of foreign equipment suppliers and thus strengthen our digital sovereignty."

Weitere Informationen:


Bildunterschriften:

  • “Secure, scalable IT infrastructures for modern everyday working life”: Dirk Jung, Head of Division at the BSI, and Dr. Christopher Basting, Head of Department at the BSI, present the certificate of approval for genuscreen Virtual to Marc Tesch, Managing Director of genua, and Michael Barth, Head of Strategy at genua (from left to right).  © genua GmbH
  • With BSI approval for the classification level German VS-NfD: genuscreen Virtual is a virtual machine (VM) that combines a highly secure packet filter firewall and a VPN gateway.  © genua GmbH 

PRESS CONTACT genua

Michael Eckstein
Press & PR
genua GmbH 
T +49 89 991950 527
E michael_eckstein@genua.eu

About genua

Based in Kirchheim near Munich, genua GmbH secures sensitive IT networks in the public and enterprise sectors, for critical infrastructure organizations and in industries with an obligation to maintain secrecy with highly secure and scalable cyber security solutions. In doing so, the company has been focusing on the comprehensive protection of networks, communication and internal network security for IT and OT for more than 30 years. The range of solutions spans from firewalls and gateways, virtual private networks, remote maintenance systems, internal network security and cloud security to remote access solutions for mobile work and the home office.

genua GmbH is a company of the Bundesdruckerei Group. With more than 400 employees, it develops and produces IT security solutions exclusively in Germany. Since the founding of the company in 1992, regular certifications and approvals from the German Federal Office for Information Security (BSI) provide proof of the high security and quality standards of the products. Customers include, among others, Arvato Systems, BMW, the German Armed Services, THW as well as the Würth Group.