NCP VS GovNet is a BSI-approved VPN solution consisting of two components — the NCP VS GovNet Connector (client) and the NCP VS GovNet Server (gateway) — designed for government agencies and organizations handling classified data at the EU RESTRICTED and NATO RESTRICTED classification levels. NCP VS GovNet Connector: A VPN client for Windows 10 and Windows 11 that establishes encrypted IPsec-based connections to the NCP VS GovNet Server. It supports seamless roaming across connection media (Wi-Fi, mobile data), VPN Path Finder Technology (IPsec/HTTPS fallback), strong authentication, central rights and configuration management, friendly net detection, hotspot logon, Pre-Logon Access Provider, Quality of Service support, and custom branding. It is compatible with external authentication hardware (e.g., smartcard readers) and software (e.g., hard disk encryption), and supports elliptic curve cryptography for signature verification. NCP VS GovNet Server: A VPN gateway installed on a server using a complete image, running a hardened Linux operating system with privilege separation. It supports user management via RADIUS, LDAP, or MS Active Directory, elliptic curve cryptography (ECC), a BSI-tested random number generator (class DRG.4), integrated IP routing and firewall features, VPN Path Finder Technology, automated tunnel forwarding, multi-tenancy, and multi-processor support. Both components are approved by the German Federal Office for Information Security (BSI) for protecting EU information classified as RESTREINT UE/EU RESTRICTED and NATO information classified as NATO RESTRICTED.