Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria

Xerox WorkCentre 5632/5638/5645/5655/5665/5675/5687
Multifunction Systems Security Target
FDP_IFF.1.3
FDP_IFF.1.4
FDP_IFF.1.5
If configured, the destination transport layer port matches
a rule in the TOE’s rule base.]
The TSF shall enforce the [implicit allow if no rules have
been defined].
The TSF shall explicitly authorize an information flow based
on the following rules: [if the rule is the default all].
The TSF shall explicitly deny an information flow based on
the following rules: [if there are no rules with matching
security attributes].
Application Note: When custom rules have not been defined by the system
administrator, the default rule (allow all traffic) will apply. Because it is a wildcard
rule, all IP addresses, ports and protocols (either TCP or UDP) will be a match
for allowed traffic.
5.3.3.9. FDP_IFC.1 (SSL) Subset information flow control
Hierarchical to:
Dependencies:
No other components.
FDP_IFF.1 Simple security attributes
FDP_IFC.1.1 The TSF shall enforce the [SSLSec SFP] on [
Subjects: Web clients;
Information: All web-based management traffic to/from
that client;
Operations: receiving HTTP traffic].
5.3.3.10. FDP_IFF.1 (SSL) Simple security attributes
Hierarchical to:
Dependencies:
FDP_IFF.1.1
No other components.
FDP_IFC.1 Subset information flow control
FMT_MSA.3 Static attribute initialization
The TSF shall enforce the [SSLSec SFP] based on the
following types of subject and information security attributes:
[
Subjects: web clients and servers
o IP address and/or DNS name
Information: X.509 certificates
o RSA public and private keys; IP address or DNS
name of the owner of the certificate].
51
Copyright 2009 Xerox Corporation, All rights reserved