Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria

Xerox WorkCentre 5632/5638/5645/5655/5665/5675/5687
Multifunction Systems Security Target
Objectives
O.RECOVER
O.FAXLINE
O.MANAGE
O.CONTROL_ACCES
S
Description
Temporary document image data from a print, network
scan, scan-to-email job, LanFax, the Fax mailbox and/or
dial directory, Scan to mailbox data, or stored document
image data from a Copy/Print, Store and Reprint job must
be overwritten on the hard disk drive in accordance with
DoD 5200.28-M immediately after that job is completed or
once the TOE is turned back on after a power failure.
Temporary document image data from a FAX job must be
zeroized in the fax card flash memory immediately after that
job is completed or once the TOE is turned back on after a
power failure. The embedded fax card flash memory
zeroization is not compliant with DoD 5200.28-M.
Temporary document image data from the jobs stored on
the HDD must also be overwritten on demand in
accordance with DoD 5200.28-M (Standard or Full ODIO).
The temporary storage for Embedded Faxes (compact
flash) must be zeroized at the command (“on demand”) of
the system administrator when a standard or full ODIO is
run. The Fax mailbox and dial directory are only zeroized
when the system administrator runs a full ODIO. The
embedded fax card flash memory zeroization is not
compliant with DoD 5200.28-M. Copy and Embedded FAX
(if installed) jobs must not be written to the hard drive at all.
The TOE will not allow access to the internal network from
the telephone line via the TOE’s FAX modem (if installed).
Likewise, the TOE will not allow accessing the PSTN port of
the TOE’s FAX modem (if installed) from the internal
network.
The TOE will provide the functions and facilities necessary
to support system administrators responsible for the
management of the TOE.
The TOE must require that system administrator(s)
authenticate with a password before allowing access to
management functions. The password must be obscured
as it is entered by the system administrator. The Local UI
will be locked for 3 minutes once 3 invalid login attempts
have been detected. The WebUI will send an error code
after every invalid authentication attempt.
The TOE must require authorized users to be identified and
authenticated before providing access to installed network
options of the TOE.
The TOE will provide the system administrator with the
ability to determine network access/information flow to the
TOE for trusted remote IT products.
27
Copyright 2009 Xerox Corporation, All rights reserved