Validated Product - SafeNet DataSecure Appliance i416, i426, and i116 Release 4.5.2 (formerly Ingrian Networks DataSecure Appliance i416, i426, and i116 Release 4.5.2)Certificate Date: 20 May 2008 Validation Report Number: CCEVS-VR-VID10282-2008 Product Type: Security Management Conformance Claim: EAL2 Augmented with ALC_FLR.1 PP Identifiers: None CC Testing Lab: InfoGard Laboratories, Inc.
PRODUCT DESCRIPTIONThe Ingrian DataSecure Appliance i416, i426, and i116 Release 4.6.2 is a scalable network security appliance that provides a centralized approach to cryptographic processing, key management and security management/policy deployment. When cryptographic processing services are required by web servers or databases served by the DataSecure appliance, they submit XML based requests to the Appliance. The cryptographic operation is completed following authentication within the DataSecure Appliance and the encryption or decryption results are returned to the server. This allows the DataSecure Appliance to offload backend application servers from processor intensive cryptographic operations by providing intelligently applied cryptographic services. The DataSecure Appliance delivers this functionality through a dedicated hardware appliance, containing a resident Network Attached Encryption (NAE) Server which communicates with Network Server and Databases exclusively over an SSL/TLS secured XML interface. SECURITY EVALUATION SUMMARYThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Ingrian DataSecure Appliance i416, i426, and i116 Release 4.6.2 was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.3 and International Interpretations effective on 11th, January 2007. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.3. InfoGard Laboratories determined that the evaluation assurance level (EAL) for the product is the EAL 2 family of assurance requirements augmented with ALC_FLR.1. The product, when configured in accordance with the guidance identified in Section 6.2 of ST, satisfies all of the security functional requirements stated in the Ingrian DataSecure Appliance i416, i426, and i116 Release 4.6.2 Security Target. This IT product does not conform to a validated Protection Profile. A Validator, on behalf of the CCEVS Validation Body, monitored the evaluation carried out by InfoGard though Validation Oversight Reviews. The evaluation was completed in November 2007. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for the Ingrian DataSecure Appliance i416, i426, and i116 Release 4.6.2, prepared by InfoGard Laboratories. |