Validated Product - Safend Protector Version 3.0Certificate Date: 13 August 2008 Validation Report Number: CCEVS-VR-VID10177-2008 Product Type: Sensitive Data Protection Conformance Claim: EAL2 PP Identifiers: None CC Testing Lab: SAIC Common Criteria Testing Laboratory Maintenance Release(s): None PRODUCT DESCRIPTIONSafend Protector 3.0 is a software product that complements enterprise data security and network/server based security products by controlling access to external physical, wireless and storage device interfaces on network endpoints (e.g. workstations, laptops). Safend Protector enables IT security administrators to design and implement an enterprise-wide security policy regulating the peripheral devices and storage media to which enterprise endpoints can connect and communicate with. Safend Protector controls access to physical ports (USB, FireWire, PCMCIA, SecureDigital (SD), serial, parallel, and modem), wireless ports (Bluetooth, WiFi, IrDA) and storage media (CD/DVD Drive, flash drives, floppy drives, tape drives). The components of Safend include the Management Server, the Management Console, and the Client.
SECURITY EVALUATION SUMMARYThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Safend Protector 3.0 TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.3. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.3. SAIC determined that the evaluation assurance level (EAL) for the product is the EAL 2 family of assurance requirements. The product, when configured as specified in the installation guides and user guides, satisfies all of the security functional requirements stated in the Safend Protector 3.0 Security Target. A Validator on behalf of the CCEVS Validation Body monitored the evaluation carried out by SAIC. The evaluation was completed in April 2008. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for Safend Protector 3.0 prepared by CCEVS. ENVIRONMENTAL STRENGTHSSafend Protector 3.0 is a commercial endpoint security product that provides: Security Audit, Identification and Authentication, Security Management, Policy Enforcement, and Protection of Security Functions.
Vendor Information
Safend, Ltd. alon.barel@safend.com +972-3-644-2622 ext. 225 +972-3-648-6146 (Fax) alon.barel@safend.com |