Validated Protection Profile - US Government Traffic-Filter Firewall Protection Profile for Low-Risk Environments, Version 1.1 (Archived)

Short Name: pp_fw_tf_lr_v1.1

Technology Type: Firewall

CC Version: 2.x

Date: 01 April 1999

Succeeded By: pp_fw_tf_br_v1.1

Sunset Date: 21 March 2008

Conformance Claim: EAL2

PP OVERVIEW

Herewith a brief summary, sufficiently detailed to enable a potential user to detemine whether the PP is of interest.

This traffic-filter firewall Protection Profile defines the minimum security requirements for firewalls used by U.S Government organizations handling unclassified information in a low-risk environment. Firewalls may consist of one or more devices that act as part of an organization’s overall security defense by isolating an organization’s internal network from the Internet or other external networks. Firewalls pass and block information flows based on a set of screening rules defined by an authorized administrator. This Protection Profile applies to firewalls that are capable of screening network traffic at the network and transport protocol levels, authenticating the authorized administrator for actions at the firewall, and auditing security-relevant events that occur.

This Validated Protection Profile is assigned to the following Validated Products

• CyberGuard Firewall/VPN Version 6.1.2
• DiamondTEK Product (DiamondCentral: NSC Application S/W version 2.0.1; NSD-Prime F/W version 2.1.4) and NSD (DiamondLink, DiamondPak, DiamondVPN) F/W version 2.1.4
• Juniper Networks Security Appliances
• Lucent Technologies Lucent VPN Firewall V7.0 (Patch 531)
• NetScreen Appliances includes models 5XP, 5XT, 25, 50, 100, 204, 208, 500, and 5200 each with ScreenOS 4.0.Or7.0
• NetScreen Appliances includes models 5XP, 5XT, 25, 50, 204, 208, 500, and 5200 each with ScreenOS 4.0.2r6