Protecting Trust at
Every Step
Supply-chain security is not a single checkpoint - it is a continuous discipline. Extreme Networks approaches supply-chain security as an integral part of product security and Operational Trust.
More than a Value
At Extreme, security is more than a value—it’s a commitment we uphold in every product, service, and interaction.
Global Security and Compliance
Our Global Security and Compliance Office is the central authority for Extreme’s global security, privacy, and compliance strategy.
Making Privacy a Competitive Edge
Key insights on protecting personal data and building trust to strengthen privacy practices.
Five Focus Areas
Protecting customers requires disciplined controls throughout the product lifecycle - from supplier qualification and manufacturing to product delivery and global supply-chain operations.
Supplier & Carrier Requirements
Extreme applies defined security requirements to suppliers and logistics providers, including annual reviews covering physical, cyber, personnel, procedural, and training controls; carrier and third-party logistics certification requirements; and screening against applicable restricted-entity lists.
- Supply Chain Security and Information Security
- Annual Security Checklist covering Procedural, Physical, Cyber, Personnel, and Training
- Mandatory AEO or CTPAT certification for carriers and 3PLs
- No sourcing from entites on the US Treasury SDN list
Manufacturing Integrity
Controlled manufacturing processes help protect product integrity through bill-of-material and test-process revision controls, component traceability, and tamper-evident product labeling.
- Full revision control of bill of materials and test processes
- Component traceability: Manufacturer, Part Number, Lot/Date Code, Serial Number
- Tamper-evident labels on all products
Counterfeit Detection & Avoidance
Extreme maintains a counterfeit electronic-part detection and avoidance program incorporating supplier controls, personnel training, inspection and testing, component traceability, approved-vendor management, and processes for identifying and managing suspect parts.
- Mandatory Counterfeit Electronic Part Detection and Avoidance
- Personnel training
- Inspection/testing criteria
- Traceability and AVL control
- Reporting, quarantining, and suspect part identification
- Flow-down to sub-tier suppliers
Product & Firmware Security
Product protections include tamper-evident labeling, controlled distribution of compiled binaries, Secure Boot on applicable platforms, and cryptographic mechanisms designed to protect the integrity and authenticity of system software and boot processes.
- Tamper-evident labelling on all products
- Only compiled binaries provided to suppliers (no source code)
- Secure Boot implemented on all high-end platforms since (e.g., 5420-8820)
- Encrypted/authenticated Linux kernel and bootloader using asymmetric keypairs
Global Supply Chain Resilience
Extreme utilizes TAA-compliant manufacturing locations, multi-carrier transportation, redundant global service capabilities, and trade compliance processes designed to strengthen continuity, reduce supply-chain risk, and help prevent unauthorized sales.
- TAA-compliant manufacturing locations
- Multi-carrier transportation model reduce risk
- Outsourced global service/RMA with location and system redundancy
- Best-in-class GTC processes to prevent unauthorized sales