Aruba 620 Specifiche Scaricare il pdf (Pagina 23)

Security Target Version 1.0 9/29/2014

Requirement Class

Requirement Component

FPT_RPL.1: Replay Detection

FPT_STM.1: Reliable Time Stamp

FPT_TST_EXT.1: Extended: TSF Testing

FPT_TUD_EXT.1: Extended: Trusted Update Resource Utilization (FRU)

FRU: Resource utilisation

FRU_RSA.1: Maximum Quotas TOE Access (FTA)

FTA: TOE access

FTA_SSL.3: TSF-initiated termination

FTA_SSL.4: User-initiated termination

FTA_SSL_EXT.1: TSF-initiated session locking

FTA_TAB.1: Default TOE Access Banners

FTA_TSE.1: TOE Session Establishment Trusted Path/Channels (FTP)

FTP: Trusted path/channels

FTP_ITC.1: Inter-TSF trusted channel

FTP_TRP.1: Trusted Path

Table 1 TOE Security Functional Components

5.2.1 Security audit (FAU)

5.2.1.1 Audit Data Generation (FAU_GEN.1)

FAU_GEN.1.1

The TSF shall be able to generate an audit record of the following auditable events: a) Start-up and

shutdown of the audit functions; b) All auditable events for the not specified level of audit; and c)

All administrative actions; d) [Specifically defined auditable events listed in Table 2 Audit

Events].

Requirement Auditable Events

Additional Audit

Record Content

Guidance Notes

FAU_GEN.1

None

FAU_GEN.2

None

FAU_SAR.1

None

FAU_SAR.2

None

FAU_SEL.1

All modifications to the

audit configuration that

occur while the audit

collection functions are

operating.

None

The command “show audit-trail”

as documented in [CLI] is used

to show a log of all

administrative actions. By

default, only commands which

change system behavior are

logged. By setting the

configuration parameter “audit-

trail all”, all commands will be

logged including commands

which do not alter system

behavior.

FAU_STG.1

None

FAU_STG_EXT.1

None

FAU_STG_EXT.3

Loss of connectivity.

None

Connectivity to the audit server

must be provided through an

IPsec tunnel. A failure of the

IPsec tunnel will indicate loss of

connectivity to the audit server.

See FCS_IPSEC_EXT.1 for

further guidance on IPsec failure

messages.

FCS_CKM.1(1)

Failure of the key

generation activity.

None

See [SYSLOG] message ID

124865, 124866

1 2 ... 18 19 20 21 22 23 24 25 26 27 28 ... 92 93

Commenti su questo manuale

Nessun commento

Aruba 620 Specifiche Pagina 23

Commenti su questo manuale

Prodotti e manuali riguardandi Networking Aruba 620