CC Certificate 

Security Target 

Validation Report 

Assurance Activity 

Administrative Guide 

The TOE is the Dell Networking Platforms running Dell EMC Networking OS v9.14 that consist of S-Series, C-Series, and Z-Series switches and includes the following appliances:

• Dell Networking S-Series S3124
• Dell Networking S-Series S3124P
• Dell Networking S-Series S3124F
• Dell Networking S-Series S3148
• Dell Networking S-Series S3148P
• Dell Networking S-Series S3048-ON
• Dell Networking S-Series S4048-ON
• Dell Networking S-Series S4048T-ON
• Dell Networking S-Series S5048F-ON
• Dell Networking S-Series S6010-ON
• Dell Networking S-Series S6100-ON
• Dell Networking C-Series C9010 and C1048P port extender
• Dell Networking Z-Series Z9100-ON

The TOE provides layer 2 and 3 network management and interconnectivity functionality by offering non-blocking, line-rate Ethernet switching, and consists of both hardware and software components. Each software version is identifiable by the unique build number. Each hardware profile provides a defined set of performance characteristics - switching bandwidth, latency, and port density while offering the same level of security features.

The underlying architecture of each TOE appliance consists of hardware that supports physical network connections, memory, processor and software that implements routing and switching functions, configuration information and drivers. While hardware varies between different appliance models, the software (Dell EMC Networking OS v9.14) is shared across all platforms.

The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. The TOE was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 3.1 R5.

The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 R5.

CygnaCom Solutions has determined that the product meets the security criteria in the Security Target, which specifies compliance with U.S. Government Standard Collaborative Protection Profile for Network Devices, September 2018, Version 2.1.

A team of validators, on behalf of the CCEVS Validation Body, monitored the evaluation. The evaluation was completed December 2019.

The TOE is classified as a Network Device.

The TOE’s Dell EMC Networking OS v9.14 exclusively relies on the Dell OpenSSL Cryptographic Library Version 2.4 operating in FIPS mode to implement all cryptographic security functionality.  Dell OpenSSL Cryptographic Library Version 2.4 validated according to FIPS 140-2 as a level 1 software cryptographic module.

The TOE is designed to provide the following functionality: 

• Security Audit
• Audit record generation for security-relevant events
• Interoperability with a remote audit server
  

• Cryptographic Support
• Validated cryptographic algorithms
• Destruction of cryptographic keys
  

• Identification and Authentication
• User access policies
• Password and certificate based authentication
  

• Security Management
• Local and remote administration
  

• Protection of the TOE Security Function (TSF)
• Self-testing on power-up
• Trusted update
  

• TOE Access
• Session timeout and lockout
• Customizable logon banner

• Trusted Path/Channels
• Secure channel for remote administrators
• Secure channel for authorized IT entities

Vendor Information