TD0606: FIT Technical Recommendation for Evaluating a NAS against the FDE AA and FDEE
Publication Date
2022.01.06
Protection Profiles
CPP_FDE_AA_V2.0E, CPP_FDE_EE_V2.0E
Other References
Section 1.6: Use Case
Issue Description
The FIT has issued a technical recommendation regarding whether a Network Attached Storage (NAS) device with a software - based FDE layer and a hardware- based FDE layer that can disable network services can be evaluated against the FDE AA and FDEE EE.
Resolution
The FIT considers a NAS device that is locally managed with a simple connection to be within scope of the document.
The NAS should be tested in AVA_VAN.1 to be certain that it is in the claimed evaluated configuration, locally managed with remote management disabled. For further information, please see the FIT interpretation at https://ccusersforum.onlyoffice.com/Products/Files/DocEditor.aspx?fileid=6058097.
Justification
See issue description. |