FDPIFF.1a Simple security attributes VPN | Nortel Networks 7.05

Security Target, Version 3.9	March 18, 2008

The TSF shall enforce the [VPN Information Flow Control SFP] on [remote authenticated VPN Clients connecting to a Nortel VPN Router] and all operations that cause that information to flow to and from subjects covered by the SFP.

FDP_IFC.2.2(a)

The TSF shall ensure that all operations that cause any information in the TSC to flow to and from any subject in the TSC are covered by an information flow control SFP.

Dependencies: FDP_IFF.1 Simple security attributes

FDP_IFC.2(b) Complete information flow control (Firewall)

Hierarchical to: FDP_IFC.1

FDP_IFC.2.1(b)

The TSF shall enforce the [Firewall Information Flow Control SFP] on [hosts on either side of a Nortel VPN Router (subject), and the Nortel VPN Router (subject), and all data flowing between the subjects (information)] and all operations that cause that information to flow to and from subjects covered by the SFP.

FDP_IFC.2.2(b)

The TSF shall ensure that all operations that cause any information in the TSC to flow to and from any subject in the TSC are covered by an information flow control SFP.

Dependencies: FDP_IFF.1 Simple security attributes

FDP_IFF.1(a) Simple security attributes (VPN)

Hierarchical to: No other components.

FDP_IFF.1.1(a)

The TSF shall enforce the [VPN Information Flow Control SFP] based on the following types of subject and information security attributes: [

ouser identity,

ouser authentication credentials and tunnel filtering of packets is based on

oProtocol ID, o Direction,

o Source, destination IP addresses, o Source, destination ports,

o Service].

FDP_IFF.1.2(a)

The TSF shall permit an information flow between a controlled subject and controlled information via a controlled operation if the following rules hold: [the VPN Client successfully authenticates to the Nortel VPN Router].

Nortel VPN Router v7.05 and Client Workstation v7.11	Page 28 of 67
© 2008 Nortel Networks

Image 28

Nortel Networks 7.05, 7.11 FDPIFC.2b Complete information flow control Firewall, FDPIFF.1a Simple security attributes VPN

Contents

Nortel Networks Corsec Security, Inc Revision History Version Modification Date Modified By Description of Changes Table of Contents Table of Figures Table of TablesProtection Profile Claims Rationale Security Target Introduction PurposeSecurity Target, TOE and CC Identification and Conformance ST, TOE, and CC Identification and Conformance Conventions, Acronyms, and Terminology ConventionsTerminology Terminology Primary Admin password Product Type TOE DescriptionProduct Description Branch Office Deployment Configuration of the TOE TOE Boundaries and Scope Physical Boundary Logical Boundary TOE Environment World Enterprise Cryptographic Support Security AuditUser Data Protection Identification and Authentication Security ManagementProtection of the TOE Security Functions Trusted Path/Channels Excluded TOE Functionality Assumptions TOE Security EnvironmentThreats to Security Threats Addressed by the TOE Threats Addressed by the TOE Environment Security Objectives Security Objectives for the TOE Security Objectives for the Environment IT Security ObjectivesNon-IT Security Objectives OE.TIME IT Security Requirements TOE Security Functional RequirementsTOE Security Functional Requirements ST Operation Description ST Operation Class FAU Security Audit FAUGEN.1 Audit Data GenerationFAUSAR.1 Audit review Auditable Events Dependencies FAUGEN.1 Audit data generation Class FCS Cryptographic Support FCSCKM.1a Cryptographic key generation Diffie-HellmanFCSCKM.1b Cryptographic key generation RSA FCSCKM.4 Cryptographic key destruction FCSCOP.1d Cryptographic operation random number generation FCSCOP.1b Cryptographic operation authenticationFCSCOP.1e Cryptographic operation hashing Security Target, Version March 18 FDPACC.2 Complete access control FDPACF.1 Security attribute based access controlClass FDP User Data Protection FDPIFC.2a Complete information flow control VPN FDPIFC.2b Complete information flow control Firewall FDPIFF.1a Simple security attributes VPN FDPIFF.1b Simple security attributes Firewall FDPUCT.1 Basic data exchange confidentiality FDPUIT.1 Data exchange integrityFDPUCT.1.1 FDPUIT.1.1 Class FIA Identification and Authentication FIAUAU.1 Timing of authenticationFIAUAU.5 Multiple authentication mechanisms FIAUID.2 User identification before any action Dependencies No dependencies Class FMT Security Management FMTMOF.1a Management of security functions behaviourFMTMOF.1b Management of security functions behaviour FMTMSA.1a Management of security attributes FMTMSA.1c Management of security attributes FMTMSA.2 Secure security attributesFMTMSA.3a Static attribute initialisation FMTMSA.2.1 FMTSMF.1 Specification of Management Functions FMTMSA.3b Static attribute initialisationFMTMSA.3c Static attribute initialisation FMTSMR.1 Security roles FMTSMR.1.2 FPTAMT.1 Abstract machine testing FPTTST.1 TSF testingClass FPT Protection of the TSF FPTRPL.1 Replay detection Class FTP Trusted Path/Channels FTPTRP.1 Trusted pathFTPTRP.1.1 FTPTRP.1.2 Security Functional Requirements on the IT Environment FPTRVM.1 Non-bypassability of the TSPFPTSEP.1 TSF domain separation FPTSTM.1 Reliable time stamps Security Target, Version 3.9March 18 Assurance Components Assurance RequirementsAssurance Requirements TOE Summary Specification TOE Security FunctionsTOE Security Description Function Configuration Log Security AuditAccounting Logs Security Log System Log Event Log Cryptographic Support Fips Validated ModulesFIPS-Validated Cryptographic Algorithms Validation Modules Fips 140-2 Certificate # User Data Protection Identification and Authentication Security Management Protection of the TOE Security Functions Power-Up Self-TestsConditional Self-Tests TOE Security Assurance Measures Trusted Path/ChannelsTOE Security Functional Requirements Satisfied FTPTRP.1 Assurance Assurance Measure Component Augmentation to EAL 4+ assurance level Protection Profile Claims Protection Profile Reference Rationale Security Objectives RationaleRelationship of Security Threats to Objectives TOE Objectives Environmental Objectives Non-IT Hack Certificate Security Functional Requirements Rationale OE.CERTIFICATE Relationship of Security Requirements to Objectives Objectives Requirements Functions and data Env Able to access such functionality FMTMSA.3a,b,c Reject packets based on their attributes Integrity Security Assurance Requirements Rationale Rationale for Strength of FunctionDependency Rationale Functional Requirements Dependencies FCSCOP.1 TOE Summary Specification Rationale Secure Delivery and Operation Configuration ManagementDevelopment Life Cycle Support Documents Guidance DocumentationTests Strength of Function Vulnerability and TOE Strength of Function Analyses Acronyms AcronymsAcronym Definition DoD SHA