Validated Product - Lancope StealthWatch NC Appliance (Model numbers M45, M250, M250X, G1, G1C, G1X, G1CX, and G1CFX) and StealthWatch Xe Appliance (Model numbers XE1000 and XE2000) containing StealthWatch version 5.6.1 and StealthWatch Management Console version 5.6.1.

PRODUCT DESCRIPTION

Lancope StealthWatch approaches intrusion detection and network management through a behavior-based architecture that provides:
• protection from unknown threats,
• network policy management,
• activity tracking, and
• forensics tools for a proactive approach to managing threats.
StealthWatch characterizes and analyzes the data flow between Internet Protocol (IP) devices to differentiate abnormal network behavior from normal behavior. StealthWatch should not be confused with signature, or protocol anomaly products. 

SECURITY EVALUATION SUMMARY

The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Lancope StealthWatch 5.6.1 TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.3 and International Interpretations effective on 9 January 2007.  The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.3 and Common Methodology for Information Technology Security Evaluation, Supplement: ALC_FLR - Flaw Remediation, Version 1.1.  Science Applications International Corporation (SAIC) determined that the evaluation assurance level (EAL) for the product is EAL 2 family of assurance requirements augmented with ALC_FLR.2.  The product, when configured as specified in the configuration guide and release notes, satisfies all of the security functional requirements stated in the Lancope StealthWatch 5.6.1 Security Target.  The evaluation was completed in January 2008.  Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for Lancope StealthWatch, prepared by CCEVS.
 

ENVIRONMENTAL STRENGTHS

The Lancope Stealthwatch is a commercial intrusion detection product that provides intrusion detection, identification and authentication, audit, protection of security functions and security management.