In the paper called: Check Point VPN-1/FireWall-1 NGX Security Target Version 1.2.2 and prepared to achieve the certification, there is a statement like this: the developer has systematically searched for vulnerabilities in the TOE and provides reasoning about why they cannot be exploited in the intended environment for the TOE.