PRODUCT DESCRIPTION

The Tumbleweed MMS and IME version 5.5.3 products consist of two main software components that comprise the TOE:

• The Tumbleweed MMS, also known as Messaging Management System (MMS), provides the enforcement of email-filtering policies for the use of corporate email systems. Such policies include those for mail filtering, included attachments, virus scanning, encryption filtering, signature filtering.
• The Tumbleweed IME, also known as Integrated Messaging Exchange (IME), provides businesses with a secure interactive communications channel to reach their customers and partners.

SECURITY EVALUATION SUMMARY

The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.1 and International Interpretations effective on 28 October, 2002. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 1.0. The Arca Common Criteria Testing Laboratory (CCTL) determined that the evaluation assurance level (EAL) for the product is the EAL 2 family of assurance requirements augmented with ACM_CAP.3, ACM_SCP.1, and ADV_HLD.2. The product, when configured as specified in the configuration guide and release notes, satisfies all of the security functional requirements stated in the Tumbleweed MMS™ and IME™ Version 5.5.3 Security Target. A validator on behalf of the CCEVS Validation Body monitored the evaluation carried out by Arca CCTL. The evaluation was completed in June 2005. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for Tumbleweed MMS™ and IME™ Version 5.5.3, prepared by CCEVS.

ENVIRONMENTAL STRENGTHS

Tumbleweed MMS™ and IME™ together provide a turnkey solution that allows companies to create a secure messaging and email solution; define email-filtering policies, archive messages that violate policies, monitor messaging traffic, and intelligently route sensitive messages through a secure channel. In addition, Tumbleweed MMS and IME also include administrative tools for system management, policy management, and account management.

Vendor Information

Tumbleweed Communications Corp.
Ken Beer, Director of Product Management
650.216.2000
650.216.2001 (Fax)
ken.beer@tumbleweed.com

http://www.tumbleweed.com