Xerox WorkCentre 5632/5638/5645/5655 - Common Criteria

Xerox WorkCentre 5632/5638/5645/5655/5665/5675/5687
Multifunction Systems Security Target
O.CONTROL_
ACCESS
O.PROTECT_CO
M
SFP so that only system administrators have the capability to query,
modify, delete, create, or install specified security attributes, keys and
certificates, and IP filter rules.
FIA_AFL.1 (AUT 3) uses the rules defined by remote network
authentication assets to deny a user access after failed logins.
FAU_GEN.1 ensures that the TOE is able to generate time-stamped
audit records of a specified set of security-relevant events related to
TOE operations.
FDP_ACC.1 and FDP_ACF.1 ensure that the TOE enforces the
PrivUserAccess SFP on subjects, objects, information, and operations
and applies specific rules on all operations involving controlled subjects
and objects, limiting access to management interfaces to the System
Administrator.
FDP_IFC.1 (FILTER) and FDP_IFF.1 (FILTER) ensure that the IP_Filter
SFP is enforced to control and protect information flow between
controlled subjects (IP address, protocol) based on specific subject and
information security attributes to enable the transmission and receipt of
user data in a protected manner.
FMT_SMF.1 requires that there is a possibility to invoke the IP Filter
function. FMT_MOF.1 specifies that the function can be enabled or
disabled by the system administrator. FMT_SMR.1 manages the role
“system administrator”.
FMT_MTD.1 (FILTER) ensures that the TOE enforces the
PrivUserAccess SFP so that only system administrators have the
capability to query, modify, delete, or create IP filter rules.
FAU_GEN.1 ensures that the TOE is able to generate time-stamped
audit records of a specified set of security-relevant events related to
TOE operations.
FCS_COP.1 (all but UDE1 and 2) ensure that the TOE provides the
cryptographic support capabilities necessary to assure secure
communication between TOE components and remote trusted.
FDP_IFC.1 (SSL), FDP_IFF.1 (SSL), FDP_UCT.1, and FDP_UIT.1, and
SSLSec SFP are enforced to control and protect information flow
between controlled subjects based on specific subject and information
security attributes to enable the transmission and receipt of
management data in a protected manner.
FMT_SMF.1 requires that there is a possibility to invoke the SSL, and IP
Filtering functions. FMT_MOF.1 specifies that these functions can be
enabled or disabled by the system administrator. FMT_SMR.1
manages the role “system administrator”.
63
Copyright 2009 Xerox Corporation, All rights reserved