Source: http://docplayer.net/794025-Courtesy-translation.html
Timestamp: 2016-12-07 16:49:38
Document Index: 341132605

Matched Legal Cases: ['art 1', 'art 2', 'art 3', 'art 3', 'art 3', 'art 3']

⭐Courtesy Translation
1 PREMIER MINISTRE Secretariat General for National Defence French Network and Information Security Agency Certification Report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise (release 9.0) and OmniVista 4760 (release 5.0) softwares Paris, 7 th April 2010, Courtesy Translation2 Certification report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise Warning This report is designed to provide sponsors with a document enabling them to assess the security level of a product under the conditions of use and operation defined in this report for the evaluated version. It is also designed to provide the potential purchaser of the product with the conditions under which he may operate or use the product so as to meet the conditions of use for which the product has been evaluated and certified; that is why this certification report must be read alongside the evaluated user and administration guidance, as well as with the product security target, which presents threats, environmental assumptions and the supposed conditions of use so that the user can judge for himself whether the product meets his needs in terms of security objectives. Certification does not, however, constitute a recommendation product from ANSSI (French Network and Information Security Agency), and does not guarantee that the certified product is totally free of all exploitable vulnerabilities. Any correspondence about this report has to be addressed to: Secrétariat Général de la Défense Nationale Agence nationale de la sécurité des systèmes d'information Centre de certification 51, boulevard de la Tour Maubourg PARIS cedex 07 SP France Reproduction of this document without any change or cut is authorised. Page 2 out 15 CER/F/07.53 OmniPCX Enterprise solution : OmniPCX Enterprise Certification report ANSSI-CC-2010/15 Certification report reference ANSSI-CC-2010/15 Product name OmniPCX Enterprise solution Product reference and version OmniPCX Enterprise software, release 9.0 OmniVista 4760 software, release 5.0 Protection profile conformity none Evaluation criteria and version Evaluation level Common Criteria version 2.3 compliant with ISO 15408: augmented ADV_HLD.2, ALC_DVS.1, ALC_FLR.3, AVA_MSU.1, VLA.2 Developer Sponsor Alcatel-Lucent 32 avenue Kleber, Colombes, France Alcatel-Lucent 32 avenue Kleber, Colombes, France Evaluation facility Oppida 4-6 avenue du vieil étang, Bâtiment B, Montigny le Bretonneux, France Phone: +33 (0) , Page 3 out 154 Certification report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise Introduction The Certification Security certification for information technology products and systems is governed by decree number dated April, 18th 2002, and published in the "Journal Officiel de la République Française". This decree stipulates that: The French Network and Information Security Agency draws up certification reports. These reports indicate the features of the proposed security targets. They may include any warnings that the authors feel the need to mention for security reasons. They may or may not be transmitted to third parties or made public, as the sponsors desire (article 7). The certificates issued by the Prime Minister certify that the copies of the products or systems submitted for evaluation fulfil the specified security features. They also certify that the evaluations have been carried out in compliance with applicable rules and standards, with the required degrees of skill and impartiality (article 8). The procedures are available on the Internet site Page 4 out 15 CER/F/07.55 OmniPCX Enterprise solution : OmniPCX Enterprise Certification report ANSSI-CC-2010/15 Content 1. THE PRODUCT PRESENTATION OF THE PRODUCT EVALUATED PRODUCT DESCRIPTION Architecture Evaluated services Product identification Life cycle Evaluated configuration THE EVALUATION EVALUATION REFERENTIAL EVALUATION WORK CRYPTOGRAPHIC MECHANISMS ROBUSTNESS ANALYSIS RANDOM NUMBER GENERATOR ANALYSIS CERTIFICATION CONCLUSION RESTRICTIONS ANNEX 1. EVALUATION LEVEL OF THE PRODUCT ANNEX 2. EVALUATED PRODUCT REFERENCES ANNEX 3. CERTIFICATION REFERENCES Page 5 out 156 Certification report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise 1. The product 1.1. Presentation of the product The evaluated product is the OmniPCX Enterprise solution, composed of the OmniPCX Enterprise software release 9.0 and the OmniVista 4760 software release 5.0, developed by Alcatel-Lucent. This product is an integrated communications solution for medium-sized businesses and large corporations. The solution combines traditional telephone functions with support for Internetbased telephony (VoIP) Evaluated product description The security target [ST] defines the evaluated product, its evaluated security functionalities and its operational environment. The security target is based on [PP VoIP] Architecture The TOE is composed of: - The OmniPCX Enterprise System, itself composed of o The OmniPCX Enterprise Call Server (OXE Call Server) which provides the telephonic services such as call switching and voice mail application, it centralizes the management and monitoring of the accompanying telephonic elements on the enterprise LAN 1 such as IP phones for example o The OmniPCX Enterprise Media Gateway (OXE Media Gateway) which is the gateway between the IP world and the traditional PSTN 2 world and supports digital (TDM) and/or analog phones; - The OmniVista 4760, itself composed of o The OmniVista 4760 Server Software (4760 Server Software) which is an application enabling to administer a set of Alcatel-Lucent OmniPCX Enterprise systems from one central server o The OmniVista 4760 Client Software (4760 Client Software) which provides the User Interface of the OmniVista Local Area Network 2 Public Swiched Telephone Network Page 6 out 15 CER/F/07.57 OmniPCX Enterprise solution : OmniPCX Enterprise Certification report ANSSI-CC-2010/15 The following figure identifies the different part of the product (framed blocs), and also its evaluated deployment. Data & Voice servers subnet OmniVista 4760 Server Software OmniPCX Enterprise Call Server Software OmniPCX Enterprise Media Gateway Software PSTN Data Users subnet IP switched LAN Standard Workstation + OmniVista 4760 Client Software Standard Workstation + Softphone application Analog Phone IP Phone... Voice Users subnet IP Phone SIP Phone TDM Phone For this evaluation: - All the OmniPCX Enterprise software have been considered (the evaluation also took into account the operating system), only the hardware has been considered out of the scope of the evaluation as it doesn t contribute to the evaluated security functions; - For the OmniVista 4760, only the applications developed by Alcatel-Lucent have been considered, the operating system and the hardware have been considered in the TOE environment as they don t contribute to the evaluated security functions (NB access to the workstation hosting the OmniVista 4760 components haven t been evaluated). End users considered in this evaluation are - Telephony administrators who directly interact with the product; - Users of IP handsets connected to the enterprise internal network, the different type of handsets considered are IP Phones, SIP phones and Softphone applications; - Users of analogs and TDM phones directly connected to the OXE Media Gateway or from the PSTN. Page 7 out 158 Certification report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise Evaluated services The product provides mainly the following services: - Call services which enable voice communications over the IP networks of the company as well as incoming calls (from the public network) and outgoing calls (to the public network); those services usually internal to the enterprise could be available from the public network PSTN with DISA 1 service; - Access to voice mail services (also available for the DISA authorized users) - Telephony Administration services which enable to manage IP phones sets and users of the previous services, they provide a calls control service of the incoming and outgoing calls that permit their accounting Product identification The configuration list [CONF] identifies the product s constituent elements. The full versions of the components of the certified product «OmniPCX Enterprise solution» are the followings: - OmniPCX enterprise, release 9.0 o OXE Call Server software, release H b o OXE Media Gateway software, release H b - OmniVista 4760, release 5.0 o 4760 Server software, release patch M o 4760 Client software, release patch M The certified version of the product can be identified by the following elements: - for OmniVista 4760, o the software version of both the client and server software is displayed from the 4760 Client application, whether this application is installed on the OmniVista 4760 Server or on a standard workstation, when selecting the About entry of the Help menu; o the patch identifier _PatchM_nmc50jar_Client=crms of the patch M of both client and server software is available in the [ ] section of the %4760_INSTALL_DIR%\install\patch_history.ini file; this patch M should be the latest patch installed; - for OmniPCX Enterprise, o the release«r9.0» and the version «H b» of the OXE Call Server and the OXE Media Gateway are displayed after a successful SSH 2 remote access from the workstation hosting the 4760 Server application 1 Direct Inward Service Access 2 Secure Shell Page 8 out 15 CER/F/07.59 OmniPCX Enterprise solution : OmniPCX Enterprise Certification report ANSSI-CC-2010/ Life cycle The product s life cycle is organised as follow - Development of the OmniVista 4760 is only realised in Chennai, India; - Most of the development of the OmniPCX Enterprise is done in Chennai. Internationalization of the GUI is developed in Shanghai. A few features are developed and supported in French R&D centers, for example: SIP stack in Brest, CS BIOS in Illkirch, Media Gateway firmware in Colombes; - Support (patch development) of the OmniVista 4760 and OmniPCX Enterprise is only done in Chennai; - Source code repository is donne in Chennai; - Document repository is done in Colombes; - Software s are all generated in Chennai. As all critical operation related to the development of the evaluated softwares are done in Colombes and Chennai sites, only the following sites have been audited: ALCATEL-LUCENT COLOMBES 32, avenue Kleber, Colombes, France ALCATEL-LUCENT INDIA LIMITED, RR Tower III, Plot Super B1, Thiruvika Industrial Estate, Guindy, Chennai, India Evaluated configuration The testing platform used by the ITSEF is representative of the architecture described in the section. ITSEF s testing platform characteristics are the following: - Both the LAN and the PSTN have been simulated; - The OmniVista 4760 Server was running on a standard server with Windows XP SP2 running - The OmniVista 4760 Client was running on a standard workstation with Windows XP SP2 running NB : For the OmniPCX Enterprise, as only one hardware configuration (x bits INTEL based hardware) is delivered by Alcatel-Lucent, the software identification is sufficient to identify the hardware evaluated configuration Page 9 out 1510 Certification report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise 2. The evaluation 2.1. Evaluation referential The evaluation has been performed in compliance with Common Criteria version 2.3 [CC] and with the Common Evaluation Methodology [CEM] Evaluation work The evaluation technical report [ETR], delivered to ANSSI the 26 th March 2010, provides details on the work performed by the evaluation facility and assesses that all evaluation tasks are pass Cryptographic mechanisms robustness analysis The product doesn t provide cryptographic mechanisms: 2.4. Random number generator analysis The product doesn t provide Random number generator. Page 10 out 15 CER/F/07.511 OmniPCX Enterprise solution : OmniPCX Enterprise Certification report ANSSI-CC-2010/15 3. Certification 3.1. Conclusion The evaluation was carried out according to the current rules and standards, with the required competency and impartiality of a licensed evaluation facility. All the work performed permits the release of a certificate in conformance with the decree This certificate testifies that the product «OmniPCX Enterprise solution» : «OmniPCX enterprise» release 9.0 and «OmniVista 4760» release 5.0, submitted for evaluation fulfils the security features specified in its security target [ST] for the evaluation level 2 augmented Restrictions This certificate only applies on the product specified in chapter 1.2 of this certification report. The user of the certified product shall respect the security objectives for the operational environment specified in the security target [ST] and shall respect the recommendations in the guidance [GUIDES], in particular: - The network must be separated in three different subnets: Voice servers / Voice users / Data users. The flows transmitted between these subnets must be controlled, based on IP address and port number, in order to restrict the authorised flows to the different elements of the product (OE.SEPARATION_NETWORKS, OE.SOFTPHONE_DATA_USERS_SUBNET) - Periodic review of the configuration of the product elements and of the logs generated by the product must be performed (OE.CONFIGURATION_REVIEW, OE.REVIEW_LOGS); - In case of recurring DISA authentication failures, the administrator must deactivate the DISA service (OE.DISA_DEACTIVATION); - Periodic configuration backup must be performed (OE.BACKUP) - The Voice Servers subnet, which have to host the OmniPCX Call Server, the OmniVista 4760 Serveur and the OmniPCX Media Gateway must be physically protected (OE.SECURE_VOICE_SERVERS_SUBNET); - The Voice Users subnet which have to host the IP handsets and the Data Users subnet which have to host the Softphoe application must be physically protected (OE.PROTECTION_VOICE_USERS_SUBNET, OE.SOFTPHONE_DATA_USERS_SUBNET); - Administrators must be trained to achieve their role (OE.TRAINING); - Administrators and all personnel having an account on the product elements have to be trust (OE.TRUSTED_ADMIN); - Access to the workstation on which the OmniVista 4760 Client runs must be restricted to trusted administrators, this workstation must be dedicated to administration functions (OE. PROTECTION_ADMIN_WORKSTATIONS); Page 11 out 1512 Certification report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise - The operating systems on which the OmniVista 4760 Client and theomnivista 4760 Server softwares are running must be hardened (OE.HARDENING- 4760_CLIENT_OS, OE.HARDENING-4760_SERVER_OS); - The Microsoft Windows IPSEC tunnel between the 4760 Server and the 4760 Client must be activated (OE.IPSEC_TUNNEL). It is also recommended to install the workstation hosting the OmniVista 4760 Client software on the Voice Servers subnet in order to restrict the administrative function to that subnet. Page 12 out 15 CER/F/07.513 OmniPCX Enterprise solution : OmniPCX Enterprise Certification report ANSSI-CC-2010/15 Annex 1. Evaluation level of the product Class Family Components by assurance level Assurance level of the product Name of the component ACM ACM_AUT Configuration ACM_CAP Configuration items management ACM_SCP ADO ADO_DEL Delivery procedures Delivery and Installation, generation and operation ADO_IGS start-up procedures ADV_FSP Informal functional specification ADV_HLD Security enforcing high-level design ADV_IMP ADV Development ADV_INT ADV_LLD ADV_RCR Informal correspondence demonstration ADV_SPM AGD AGD_ADM Administrator guidance Guidance AGD_USR User guidance ALC Life-cycle support ALC_DVS Indentification of security measures ALC_FLR 3 Systematic Flow remediation ALC_LCD ALC_TAT ATE_COV Evidence coverage ATE Tests ATE_DPT ATE_FUN Functional testing ATE_IND Independant testing sample AVA Vulnerability assessment AVA_CCA AVA_MSU Examination of guidance AVA_SOF Strength of TOE security function evaluation AVA_VLA Independent vulnerability analysis Page 13 out 1514 Certification report ANSSI-CC-2010/15 OmniPCX Enterprise solution : OmniPCX Enterprise Annex 2. Evaluated product references [ST] Reference security target for the evaluation: - «OmniPCX Enterprise Common Criteria Security Target», reference 3EU_29000_0011_DEZZA, version 16 For the needs of publication, the following security target has been provided and validated in the evaluation: - «OmniPCX Enterprise R9.0 Common Criteria Security Target», reference 3EU_29000_0019_DEZZA, version 3 [ETR] Evaluation technical report : - «Evaluation Technical Report - CALICOT PROJECT», reference OPPIDA/CESTI/CALICOT/RTE, version 1.2 [CONF] OmniPCX Enterprise configuration list : - «OmniPCX Enterprise R9.0 : Software switch file», reference 3BA_50239_AAAB_DSZZA, version 6 - «H b read.me file», reference ref. [28] ~dhs3ccom/patch/h1/dyn_h b/read.me OmniVista 4760 configuration list : - «4760 source code configuration list», reference ref. [27] 4760_ Documentation configuration list : - «CC/MLE evaluation documentation plan», reference 3EU_29000_0004_AAZZA, version 12 [GUIDES] [PP VoIP]. Installation guidance: - «CC/MLE evidence: Installation, generation and start-up», reference 3EU_29000_0023_UUZZA, version 10 Administration guidance: - «CC/MLE evidence: Administration guidance», reference 3EU_29000_0024_UUZZA, version 12 User guidance: - «CC/MLE evidence: User guidance», reference 3EU_29000_0025_UUZZA, version 06 Low Assurance Protection Profile for a Voice over IP Infrastructure, version 1.1, 14th March 2005 Certified by BSI (Bundesamt für Sicherheit in der Informationstechnik) under refernce BSI-PP Page 14 out 15 CER/F/07.515 OmniPCX Enterprise solution : OmniPCX Enterprise Certification report ANSSI-CC-2010/15 Annex 3. Certification references Decree number dated 18 th April 2002 related to the security evaluations and certifications for information technology products and systems. [CER/P/01] Procedure CER/P/01 - Certification of the security provided by IT products and systems, DCSSI. [CC] Common Criteria for Information Technology Security Evaluation: Part 1: Introduction and general model, August 2005, version 2.3, ref CCMB ; Part 2: Security functional requirements, August 2005, version 2.3, ref CCMB ; Part 3: Security assurance requirements, August 2005, version 2.3, ref CCMB The content of Common Criteria version 2.3 is identical to the international ISO/IEC 15408:2005. [CEM] Common Methodology for Information Technology Security Evaluation: Evaluation Methodology, August 2005, version 2.3, ref CCMB The content of CEM version 2.3 is identical to the international ISO/IEC 18045:2005. Page 15 out 15 Similar documents
PREMIER MINISTRE Secretariat General for National Defence Central Directorate for Information Systems Security Certification Report DCSSI-2008/20 Paris, 8 th of July 2008, Courtesy Translation Certification More information Joint Interpretation Library. Guidance for Smartcard evaluation
Joint Interpretation Library Guidance for Smartcard evaluation Version 1.1 March 2002 Joint Interpretation Library Guidance for smartcard evaluation Table of Contents 1. Objective... 5 2. Smartcard product More information Courtesy Translation
PREMIER MINISTRE Secrétariat général de la défense et de la sécurité nationale Agence nationale de la sécurité des systèmes d'information Certification Report ANSSI-CC-PP-2010/04 (ref. PU-2009-RT-79, version More information OmniPCX Enterprise Common Criteria Security Target
OmniPCX Enterprise Common Criteria Security Target ALCATEL-LUCENT Enterprise Product Group March 2010 Ref: 3EU_29000_0019_DEZZA_03 Alcatel-Lucent All Rights Reserved Alcatel-Lucent 2010 Table of Content More information Open Smart Card Infrastructure for Europe
Open Smart Card Infrastructure for Europe v2 Volume 8: Part 3-1: Authors: Security and Protection Profiles (Common Criteria Supporting Document) eesc TB3 Protection Profiles, Security Certification NOTICE More information DataPower XS40 XML Security Gateway and DataPower XI50 Integration Appliance Version 3.6. Security Target Version 0.75
DataPower S40 ML Security Gateway and DataPower I50 Integration Appliance Version 3.6 Security Target Version 0.75 10/09/2008 Prepared for: IBM SOA Appliance Group One Rogers St Cambridge, MA 02142 Prepared More information Joint Interpretation Library. Security Evaluation and Certification of Digital Tachographs
Joint Interpretation Library Security Evaluation and Certification of Digital Tachographs JIL interpretation of the Security Certification according to Commission Regulation (EC) 1360/2002, Annex 1B Version More information TRUSTED SECURITY FILTER SECURITY TARGET
TRUSTED SECURITY FILTER SECURITY TARGET Edition: 4 29 Oct 07 Previous editions: Ed. 1 11 May 2006 Ed. 2 16 Aug 2006 Ed. 3 28 June 2007 Author: KKK Appr.: PÅT All pages in this document shall have the same More information Certification Report StoneGate FW/VPN 5.2.5
Ärendetyp: 6 Diarienummer: 11FMV3127-87:1 Dokument ID HEMLIG/ enligt Offentlighets- och sekretesslagen (2009:400) 2012-01-23 Country of origin: Sweden Försvarets materielverk Swedish Certification Body More information Merging Safety and Assurance: The Process of Dual Certification for Software
Merging Safety and Assurance: The Process of Dual Certification for Software Carol Taylor, Jim Alves-Foss, and Bob Rinker Center for Secure and Dependable Systems University of Idaho Track 5 250-B High More information Compucat Research Pty Limited 14 Wales St, Belconnen ACT 2617 ABN 48 008 602 980
Compucat Research Pty Limited 14 Wales St, Belconnen ACT 2617 ABN 48 008 602 980 Secure Optical Switch Version-01 Security Target P/N 2066-0012-05 P/N 2066-0012-05 February 08 Page -1 Table of Contents More information National Information Assurance Partnership
National Information Assurance Partnership TM Common Criteria Evaluation and Validation Scheme Validation Report Cisco IOS Firewall Versions 12.3(14)T and 12.4(4)T Report Number: CCEVS-VR-06-0050 Dated: More information BSI-PP-0003-2001. for. Smart Card Security User Group Smart Card Protection Profile (SCSUG-SCPP) Version 3.0. developed by
Certification Report Bundesamt für Sicherheit in der Informationstechnik BSI-PP-0003-2001 for Smart Card Security User Group Smart Card Protection Profile (SCSUG-SCPP) Version 3.0 developed by Smart Card More information Security Target for Cisco Secure PIX Firewall 515, 520, 525 Version 5.2(3)
Security Target for Cisco Secure PIX Firewall 515, 520, 525 Version 5.2(3) Reference: ST January 2001 Version: 1.6 Europe: USA: CISCO Systems Ltd CISCO Systems Inc. 3 The Square 170 West Tasman Drive Stockley More information Senforce Endpoint Security Suite Version 3.1.175 Security Target
Senforce Endpoint Security Suite Version 3.1.175 Security Target Version 1.0 06/19/07 Prepared for: Senforce Technologies, Inc. 147 W Election Rd Ste 110 Draper UT 84020 Prepared By: Science Applications More information Certification Report BSI-DSZ-CC-0212-2004. for. Renesas AE45C1 (HD65145C1) Smartcard Integrated Circuit Version 01. from. Renesas Technology Corp.
Certification Report Federal Office for Information Security BSI-DSZ-CC-0212-2004 for Renesas AE45C1 (HD65145C1) Smartcard Integrated Circuit Version 01 from Renesas Technology Corp. - Bundesamt für Sicherheit More information Common Criteria for Information Technology Security Evaluation. Part 3: Security assurance components. September 2012. Version 3.
Common Criteria for Information Technology Security Evaluation Part 3: Security assurance components September 2012 Version 3.1 Revision 4 CCMB-2012-09-003 Foreword This version of the Common Criteria More information Certification Report. SafeNet Luna PCI configured for use in Luna SA 4.5.1 (RF) with Backup
TÜV Rheinland Nederland B.V. Version 20101101 Certification Report SafeNet Luna PCI configured for use in Luna SA 4.5.1 (RF) with Backup Sponsor and developer: SafeNet Canada, Inc. 20 Colonnade Road, Suite More information Build a CC assurance package dedicated to your risk assessment. Francois GUERIN Security Program Manager francois.guerin@gemalto.
Build a CC assurance package dedicated to your risk assessment Francois GUERIN Security Program Manager francois.guerin@gemalto.com Gemplus & Axalto merge into Gemalto 1.7 billion in combined pro-forma More information National Information Assurance Partnership. Common Criteria Evaluation and Validation Scheme
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme TM Validation Report Report Number: CCEVS-VR-VID10257-2011 Dated: 31 March 2011 Version: 1.0 National Institute More information Joint Interpretation Library. ETR-lite for composition : Annex A Composite smartcard evaluation : Recommended best practice. IC and ES composition
ETR-lite for composition : Annex A Composite smartcard evaluation : Recommended best practice IC and ES composition Version 1.2 March 2002 ETR-lite for Composition Annex A Table of Contents 1. Foreword... More information Teradata Database Version 2 Release 6.1.0 (V2R6.1.0) Security Target
Teradata Database Version 2 Release 6.1.0 (V2R6.1.0) Security Target Version 2.0 February 2007 TRP Number: 541-0006458 NCR, Teradata and BYNET are registered trademarks of NCR Corporation. Microsoft, Windows, More information Guidelines for Developer Documentation
Guidelines for Developer Documentation according to Common Criteria Version 3.1 Version 1.0 Bundesamt für Sicherheit in der Informationstechnik Postfach 20 03 63 53133 Bonn Phone: +49 (0)3018 9582-111 More information BSI-DSZ-CC-0678-2011. for. Microsoft Forefront Unified Access Gateway 2010 (CC) Version / Build 4.0.1752.10000. from. Microsoft Corporation
BSI-DSZ-CC-0678-2011 for Microsoft Forefront Unified Access Gateway 2010 (CC) Version / Build 4.0.1752.10000 from Microsoft Corporation BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach More information Exchange Server 2003 Common Criteria Evaluation Security Target Exchange Server 2003 Team
Exchange Server 2003 Common Criteria Evaluation Security Target Exchange Server 2003 Team Author: Michael Grimm Status: Final Version: 1.9 Revision: 1 Last Saved: 2005-06-21 File Name: MS_EX_ST_1.9.doc More information Security Target. Astaro Security Gateway V8 Packet Filter Version 1.000. Assurance Level EAL4+ Common Criteria v3.1
Astaro Security Gateway V8 Packet Filter Version 1.000 Assurance Level EAL4+ Common Criteria v3.1 This Security Target also covers the secunet wall 2 packet filter Version : 1.03 Date: 2011-05-20 Author: More information National Information Assurance Partnership
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme Validation Report Gradkell Systems, Inc. DBsign for Client/Server Applications Version 3.0 Report Number: CCEVS-VR-05-0127 More information Trust Technology Assessment Program. Validation Report
Trust Technology Assessment Program Validation Report U.S. Government Traffic Filter Firewall Protection Profile for Low-Risk Environments version 1.1 TTAP Report Number: TTAP-VR-0007 June, 1999 Mutual More information Certification Report
Certification Report EAL 2+ Evaluation of Issued by: Communications Security Establishment Certification Body Canadian Common Criteria Evaluation and Certification Scheme 2008 Government of Canada, Communications More information National Information Assurance Partnership. Common Criteria Evaluation and Validation Scheme Validation Report
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme Validation Report TM HP Network Node Management Advanced Edition Software V7.51 with patch PHSS_35278 Report More information BSI-DSZ-CC-0683-2014. for. IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2. from. IBM Corporation
BSI-DSZ-CC-0683-2014 for IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2 from IBM Corporation BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 More information Australasian Information Security Evaluation Program
Australasian Information Security Evaluation Program Certification Report Certificate Number: 2009/54 2 June 2009 Version 1.0 Commonwealth of Australia 2009. Reproduction is authorised provided that the More information IBM WebSphere Message Broker Security Target
IBM WebSphere Message Broker Security Target Version 2.1.2 2007-08-22 Document History Version Date Summary Author 1.0 2006-10-23 Final EAL3 ST plus changes by IBM. SAIC / IBM 1.1 2006-12-11 Fixed inconsistencies. More information Certification Report
Certification Report EAL 2+ Evaluation of Symantec Endpoint Protection Version 11.0 Issued by: Communications Security Establishment Canada Certification Body Canadian Common Criteria Evaluation and Certification More information Australasian Information Security Evaluation Program
Australasian Information Security Evaluation Program Certification Report Certificate Number: 2010/71 10 Dec 2010 Version 1.0 Commonwealth of Australia 2010. Reproduction is authorised provided that the More information Security Target for BorderWare Firewall Server 6.5
Security Target for BorderWare Firewall Server 6.5 Reference: ST January 2002 Version : 2.4 North America: Europe: 50 Burnhamthorpe Rd. W. 1 The Harlequin Centre Suite 502 Southall Lane Mississauga Southall More information COURTESY TRANSLATION
PREMIER MINISTRE Secrétariat général de la défense nationale Paris, 7 April 2003 872 /SGDN/DCSSI/SDR Reference : SIG/P/01.1 Direction centrale de la sécurité des systèmes d information PROCEDURE CERTIFICATION More information Check Point Endpoint Security Media Encryption Security Target
Check Point Endpoint Security Media Encryption Security Target Version 1.0 June 23, 2010 Prepared for: 5 Ha Solelim St. Tel Aviv, Israel 67897 Prepared By: Science Applications International Corporation More information Certification Report BSI-DSZ-CC-0306-2005. for. Cisco VoIP Telephony Solution. Version 1.0. from. Cisco Systems, Inc.
Bundesamt für Sicherheit in der Informationstechnik for Cisco VoIP Telephony Solution Version 1.0 from Cisco Systems, Inc. - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 More information Common Methodology for Information Technology Security Evaluation. Evaluation methodology. September 2012. Version 3.1 Revision 4 CCMB-2012-09-004
McAfee Web Gateway Version 7.0.1.1 EAL 2 + ALC_FLR.2 Security Target Release Date: September 2010 Document ID: Version: Draft J Prepared By: Primasec Ltd. Prepared For: McAfee Inc. 3965 Freedom Circle More information GuardianEdge Data Protection Framework 9.0.1 with GuardianEdge Hard Disk Encryption 9.0.1 and GuardianEdge Removable Storage Encryption 3.0.
GuardianEdge Data Protection Framework 9.0.1 with GuardianEdge Hard Disk Encryption 9.0.1 and GuardianEdge Removable Storage Encryption 3.0.1 Security Target Version 2.01 Common Criteria EAL4 augmented More information Citrix NetScaler Platinum Edition Load Balancer Version 10.5 running on MPX 9700-FIPS, MPX 10500-FIPS, MPX 12500-FIPS, MPX 15500-FIPS appliances
122 CERTIFICATION REPORT No. CRP294 Citrix NetScaler Platinum Edition Load Balancer Version 10.5 running on MPX 9700-FIPS, MPX 10500-FIPS, MPX 12500-FIPS, MPX 15500-FIPS appliances Issue 1.0 November 2015 More information National Information Assurance Partnership
National Information Assurance Partnership TM Common Criteria Evaluation and Validation Scheme Validation Report Security Requirements for Voice Over IP Application Protection Profile for Mobility Voice More information CC V3 application to Smart Cards and similar devices
CC V3 application to Smart Cards and similar devices 8th ICCC Rome, 25-27 September 2007 ISCI-WG1 speaker: Françoise Forge 25-27 September 2007 8th ICCC Rome 1 Presentation overview ISCI - a Eurosmart More information BSI-DSZ-CC-0755-2012. For. Microsoft Windows Server 2008 R2 Hyper-V, Release 6.1.7600. from. Microsoft Corporation
BSI-DSZ-CC-0755-2012 For Microsoft Windows Server 2008 R2 Hyper-V, Release 6.1.7600 from Microsoft Corporation BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn More information BSI-DSZ-CC-S-0040-2015. for. Dream Chip Technologies GmbH Germany. Dream Chip Technologies GmbH
BSI-DSZ-CC-S-0040-2015 for Dream Chip Technologies GmbH Germany of Dream Chip Technologies GmbH BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn Phone +49 (0)228 More information Korean National Protection Profile for Voice over IP Firewall V1.0 Certification Report
KECS-CR-16-36 Korean National Protection Profile for Voice over IP Firewall V1.0 Certification Report Certification No.: KECS-PP-0717-2016 2016. 6. 10 IT Security Certification Center History of Creation More information Details for the structure and content of the ETR for Site Certification. Version 1.0
Details for the structure and content of the ETR for Site Certification Version 1.0 Bundesamt für Sicherheit in der Informationstechnik Postfach 20 03 63 53133 Bonn Tel.: +49 22899 9582-111 E-Mail: zerti@bsi.bund.de More information Certification Report
Certification Report Symantec Network Access Control Version 12.1.2 Issued by: Communications Security Establishment Canada Certification Body Canadian Common Criteria Evaluation and Certification Scheme More information C015 Certification Report
C015 Certification Report NexCode National Security Suite Release 3 File name: Version: v1a Date of document: 15 June 2011 Document classification: For general inquiry about us or our services, please More information BSI-DSZ-CC-0698-2012. for
BSI-DSZ-CC-0698-2012 for Database Engine of Microsoft SQL Server 2008 R2 Enterprise Edition and Datacenter Edition (English) x64, Version 10.50.2500.0 from Microsoft Corporation BSI - Bundesamt für Sicherheit More information Canon ir6570/ir5570 Series ir Security Kit-B3. Security Target
Document ID: CANON-Device05-001 Canon ir6570/ir5570 Series ir Security Kit-B3 Security Target This document is a translation of the security target written in Japanese, which has been evaluated and certified. More information Australasian Information Security Evaluation Program
Australasian Information Security Evaluation Program Certification Report Certificate Number: 2010/66 10 Mar 2010 Version 1.0 Commonwealth of Australia 2010. Reproduction is authorised provided that the More information Certification Report - Firewall Protection Profile and Firewall Protection Profile Extended Package: NAT
Certification Report EAL 4+ (AVA_VAN.5) Evaluation of ID&Trust Ltd. HTCNS Applet v1.03 issued by Turkish Standards Institution Common Criteria Certification Scheme Certificate Number: 21.0.01/TSE-CCCS-29 More information Common Criteria Evaluation for a Trusted Entrust/PKI
Common Criteria Evaluation for a Trusted Entrust/PKI Author: Marc Laroche Date: March 2000 Version: 2.0 2000, Entrust, Inc. Entrust is a registered trademark of Entrust Technologies Inc. in the United More information BSI-DSZ-CC-0712-2011. For. NXP MIFARE DESFire EV1 MF3ICD81. from. NXP Semiconductors Germany GmbH
BSI-DSZ-CC-0712-2011 For NXP MIFARE DESFire EV1 MF3ICD81 from NXP Semiconductors Germany GmbH BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn Phone +49 (0)228 More information Certification Report on REDOWL SecuOS V4.0 for RHEL4 of TSonNet Co., Ltd.
KECS-CR-07-01 Certification Report on REDOWL SecuOS V4.0 for RHEL4 of TSonNet Co., Ltd. Certification No. : KECS-CISS-0060-2007 Jan. 2007 National Intelligence Service IT Security Certification Center More information National Information Assurance Partnership. Common Criteria Evaluation and Validation Scheme. Validation Report
National Information Assurance Partnership Common Criteria Evaluation and Validation Scheme TM Validation Report Secure Computing IronMail Email Security Gateway v6.7 HF2 Report Number: CCEVS-VR-VID10211-2008 More information Smartcard IC Platform Protection Profile
Smartcard IC Platform Protection Profile Version 1.0 July 2001 developed by Atmel Smart Card ICs Hitachi Europe Ltd. Infineon Technologies AG Philips Semiconductors Registered and Certified by Bundesamt More information Security Target Sophos UTM V9 Packet Filter Version 1.000
Sophos UTM V9 Packet Filter Version 1.000 Assurance Level EAL4+ Common Critera v3.1 Revision 4 Document version: 1.00 Document date: 2015-03-25 Document History Version Date Change(s) Author(s) 0.90 2014-02-19 More information Application of ALC requirements to Open Source projects
Application of ALC requirements to Open Source projects Christophe BLAD 1 ICCC 2012 Paris CESeCore Open Source library for digital signature and PKI services https://www.cesecore.eu Signature Key generation More information BSI-DSZ-CC-0766-2012. for. Oracle Database 11g Release 2 Enterprise Edition. from. Oracle Corporation
BSI-DSZ-CC-0766-2012 for Oracle Database 11g Release 2 Enterprise Edition from Oracle Corporation BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn Phone +49 (0)228 More information AUTOMATIC CASH DISPENSERS/ TELLER MACHINES PROTECTION PROFILE. ecf. Version 1.00. Registered at the French Certification Body under the number PP/9907
PROTECTION PROFILE Version 1.00 AUTOMATIC CASH DISPENSERS/ TELLER MACHINES Registered at the French Certification Body under the number PP/9907 ecf Evaluation et Certifica ti on Fr ança is e CONTENTS I. More information Green Hills Software INTEGRITY-178B Separation Kernel Security Target
Green Hills Software INTEGRITY-178B Separation Kernel Security Target Version 1.0 Prepared for: Green Hills Software, Inc. 34125 US Hwy 19 North Suite 100 Palm Harbor, FL 34684 USA Prepared By: Science More information CC V3.0 How it affects Smart Card evaluation
CC V3.0 How it affects Smart Card evaluation 6th ICCC TOKYO 28-29 September 2005 Hans-Gerd Albertsen/ Philips Semiconductors Françoise Forge/ Gemplus Catherine Gibert/ ST Microelectronics Tyrone Stodart/ More information National Information Assurance Partnership
National Information Assurance Partnership TM Common Criteria Evaluation and Validation Scheme Validation Report The Boeing Company, P.O. Box 3999, M/S 88-12, Seattle, WA 98124-2499 Boeing Secure Server More information MINISTERIO DE DEFENSA CENTRO NACIONAL DE INTELIGENCIA CENTRO CRIPTOLÓGICO NACIONAL ORGANISMO DE CERTIFICACIÓN
REF: 2010-22-INF-764 V1 Distribution: Expediente Date: 21.11.2011 Created: CERT3 Reviewed: CALIDAD Approbed: TECNICO CERTIFICATION REPORT FOR FOR HUAWEI INTEGRATED MANAGEMENT APPLICATION PLATFORM VERSION More information Supporting Document Guidance. ETR template for composite evaluation of Smart Cards and similar devices. September 2007. Version 1.
Supporting Document Guidance ETR template for composite evaluation of Smart Cards and similar devices September 2007 Version 1.0 Revision 1 CCDB-2007-09-002 Foreword This is a supporting document, intended More information Protection Profile for Single-level Operating Systems in Environments Requiring Medium Robustness
Protection Profile for Single-level Operating Systems in Environments Requiring Medium Robustness Version 1.22 Information Assurance Directorate National Security Agency 9800 Savage Road Fort George G. More information BSI-DSZ-CC-S-0035-2014. for. GLOBALFOUNDRIES Singapore Pte. Ltd. GLOBALFOUNDRIES Singapore Pte. Ltd.
BSI-DSZ-CC-S-0035-2014 for GLOBALFOUNDRIES Singapore Pte. Ltd. of GLOBALFOUNDRIES Singapore Pte. Ltd. BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn Phone +49 More information Certification Report
Certification Report EAL 4 Evaluation of SecureDoc Disk Encryption Version 4.3C Issued by: Communications Security Establishment Certification Body Canadian Common Criteria Evaluation and Certification More information BSI-DSZ-CC-0811-2013. for. Microsoft SQL Server 2012 Database Engine Enterprise Edition x64 (English), Version 11.0.3000.0 (including Service Pack 1)
BSI-DSZ-CC-0811-2013 for Microsoft SQL Server 2012 Database Engine Enterprise Edition x64 (English), Version 11.0.3000.0 (including Service Pack 1) from Microsoft Corporation BSI - Bundesamt für Sicherheit More information SAMSUNG SDS FIDO Server Solution V1.1 Certification Report
KECS-CR-15-73 SAMSUNG SDS FIDO Server Solution V1.1 Certification Report Certification No.: KECS-ISIS-0645-2015 2015. 9. 10 IT Security Certification Center History of Creation and Revision No. Date Revised More information Oracle Identity and Access Management 10g Release 10.1.4.0.1 running on Red Hat Enterprise Linux AS Release 4 Update 5
122-B CERTIFICATION REPORT No. CRP245 Oracle Identity and Access Management 10g Release 10.1.4.0.1 running on Red Hat Enterprise Linux AS Release 4 Update 5 Issue 1.0 June 2008 Crown Copyright 2008 Reproduction More information UK IT SECURITY EVALUATION AND CERTIFICATION SCHEME
UK IT SECURITY EVALUATION AND CERTIFICATION SCHEME 122-B CERTIFICATION REPORT No. P149 CHECK POINT VPN-1/FIREWALL-1 Issue 1.0 January 2001 Crown Copyright 2001 Reproduction is authorised provided the report More information KYOCERA MITA. Data Security Kit (B), Overseas Security Target, Version 0.15
KYOCERA MITA Data Security Kit (B), Overseas Security Target, Version 0.15 This document is a translation of the security target written in Japanese, which has been evaluated and certified. The Japan Certification More information BSI-DSZ-CC-0636-2012. for. IBM Tivoli Access Manager for e-business version 6.1.1 FP4 with IBM Tivoli Federated Identity Manager version 6.2.
BSI-DSZ-CC-0636-2012 for IBM Tivoli Access Manager for e-business version 6.1.1 FP4 with IBM Tivoli Federated Identity Manager version 6.2.1 FP2 from IBM Corporation BSI - Bundesamt für Sicherheit in der More information Joint Interpretation Library
Document purpose: provide rules to ensure that CC is used for hardware integrated circuits in a manner consistent with today s state of the art hardware Version 3.0 February 2009 Joint Interpretation Library More information CERTIFICATION REPORT
REF: 2011-11-INF-837 v1 Target: Público Date: 17.04.2012 Created by: CERT8 Revised by: CALIDAD Approved by: TECNICO CERTIFICATION REPORT File: 2011-11 KONA 102J1 epassport EAC v1.1 Applicant: KEBTechnology More information Faculty of Informatics Masaryk University Application-Level Firewall Protection Profile for High Robustness Environments Initial Considerations
} w!"#$%&'()+,-./012345 More information Low Assurance Security Target for a Cisco VoIP Telephony System
Low Assurance Security Target for a Cisco VoIP Telephony System Security Target Version 1.6 March 14, 2005 Document Control Preparation Action Name Date Prepared by: Rob Hunter of TNO-ITSEF BV on behalf More information BSI-DSZ-CC-0726-2012. for. Digital Tachograph EFAS-4.0, Version 02. from. intellic GmbH
BSI-DSZ-CC-0726-2012 for Digital Tachograph EFAS-4.0, Version 02 from intellic GmbH BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn Phone +49 (0)228 99 9582-0, More information Certification Report
Certification Report EAL 3+ Evaluation of AccessData Cyber Intelligence and Response Technology v2.1.2 Issued by: Communications Security Establishment Canada Certification Body Canadian Common Criteria More information BSI-DSZ-CC-0889-2013. for. tru/cos tacho v1.1. from. Trueb AG
BSI-DSZ-CC-0889-2013 for tru/cos tacho v1.1 from Trueb AG BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn Phone +49 (0)228 99 9582-0, Fax +49 (0)228 9582-5477, More information Joint Interpretation Library. Guidance for smartcard evaluation
Joint Interpretation Library Guidance for smartcard evaluation Version 2.0 February 2010 Table of content 1. REFERENCES 5 2. OBJECTIVE 6 3. SMARTCARD PRODUCT PRESENTATION AND DEFINITIONS 7 3.1. Glossary More information Australasian Information Security Evaluation Program
Australasian Information Security Evaluation Program Juniper Networks, Inc. JUNOS 12.1 X46 D20.6 for SRX-Series Platforms Certification Report 2015/90 3 July 2015 Version 1.0 Commonwealth of Australia More information Supporting Document Guidance. Security Architecture requirements (ADV_ARC) for smart cards and similar devices. April 2012. Version 2.
Supporting Document Guidance Security Architecture requirements (ADV_ARC) for smart cards and similar devices April 2012 Version 2.0 CCDB-2012-04-003 Foreword This is a supporting document, intended to More information Security Target for Citrix Presentation Server 4.0 For Windows
Security Target for Citrix Presentation Server 4.0 For Windows Reference: ST/T488 July 2005 Version: 1.0 This document has been prepared on behalf of: Prepared by: Citrix Systems, Inc BT 851 West Cypress More information Citrix Password Manager, Enterprise Edition Version 4.5
122-B COMMON CRITERIA CERTIFICATION REPORT No. CRP235 Citrix Password Manager, Enterprise Edition Version 4.5 running on Microsoft Windows and Citrix Presentation Server Issue 1.0 June 2007 Crown Copyright More information BSI-DSZ-CC-0670-2011. for. Microsoft Forefront Threat Management Gateway 2010 Version / Build 7.0.7734.100. from. Microsoft Corporation
BSI-DSZ-CC-0670-2011 for Microsoft Forefront Threat Management Gateway 2010 Version / Build 7.0.7734.100 from Microsoft Corporation BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 More information Security Audit VIS Central System. Summary Report
Security Audit VIS Central System Summary Report 1 June 2012 1 1. INTRODUCTION 1.1 Visa information system The Visa Information System (VIS) is a system for the exchange of data on short-stay visas among More information BSI-DSZ-CC-0687-2011. for. JBoss Enterprise Application Platform 5 Version 5.1.0 and 5.1.1. from. Red Hat
BSI-DSZ-CC-0687-2011 for JBoss Enterprise Application Platform 5 Version 5.1.0 and 5.1.1 from Red Hat BSI - Bundesamt für Sicherheit in der Informationstechnik, Postfach 20 03 63, D-53133 Bonn Phone +49 More information Oracle Business Intelligence Enterprise Edition (OBIEE) Version 10.1.3.3.2 with Quick Fix 090406 running on Oracle Enterprise Linux 4 update 5 x86_64
122-B CERTIFICATION REPORT No. CRP250 Business Intelligence Edition (OBIEE) Version 10.1.3.3.2 with Quick Fix 090406 running on update 5 Issue 1.0 June 2009 Crown Copyright 2009 All Rights Reserved Reproduction More information Certification Report
Certification Report HP Network Automation Ultimate Edition 10.10 Issued by: Communications Security Establishment Certification Body Canadian Common Criteria Evaluation and Certification Scheme Government More information Australasian Information Security Evaluation Program
Australasian Information Security Evaluation Program Certification Report Certificate Number: 2009/58 17 September 2009 Version 1.0 Commonwealth of Australia 2009. Reproduction is authorised provided that More information 2016 © DocPlayer.net Privacy Policy | Terms of Service | Feedback