NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: mod_wlan_as_v1.0

Technology Type: Wireless LAN

CC Version: 3.1

Date: 2022.04.19

Transition End Date: 2022.10.19

Preceded By: pp_wlan_as_ep_v1.0

Conformance Claim: None

PP-Module for Wireless Local Area Network (WLAN) Access System Version 1.0 

Supporting Docs 

PP Configuration for NDcPP-WLAN-AS_v1.0 

PP Configuration for NDcPP-WIDS-WLANAS_v1.0 

PP Configuration for NDcPP-WLANAS-FW-VPNGW_v1.0  

PP Configuration for NDcPP-VPNGW-WLANAS_V1.0  

PP Configuration Document for NDcPP-VPNGW-WLANAS_V1.1  

PP Configuration Document for NDcPP-WLANAS-FW-VPNGW_v1.1  

PP Configuration Document for NDcPP-VPNGW-WLANAS_v2.0  

PP Configuration Document for NDcPP-WIDS-WLANAS_v2.0  

PP Configuration Document for NDcPP-WLANAS_v2.0  

PP Configuration Document for NDcPP-WLANAS-FW-VPNGW_v2.0  

PP OVERVIEW

This PP-Module is written to address the situation when network packets cross the boundary between a wired private network and a wireless client via a WLAN Access System.  The WLAN Access System provides secure communication between a user (wireless client) and a wired (trusted) network by supporting security functions such as administration, authentication, encryption, and the protection and handling of data in transit.  To protect the data in-transit from disclosure and modification, a WLAN Access System is used to establish secure communications.  The WLAN Access System provides one end of the secure cryptographic tunnel and performs encryption and decryption of network packets in accordance with a WLAN Access System security policy negotiated with its authenticated wireless client.  It supports multiple simultaneous wireless connections and is capable of establishing and terminating multiple cryptographic tunnels to and from those peers.

The proper installation, configuration, and administration of the WLAN Access System are critical to its correct operation.  

Assigned to the following Validated Products

• VID11333 – Aruba Mobility Controller with ArubaOS 8.10
• VID11377 – DataSoft RAP-117
• VID11382 – Ruckus SmartZone WLAN Controllers & Access Points with WIDS, R5.2.1.3

Active Related Technical Decisions

• 0832 – Aligning MOD_WLAN_AS 1.0 with NDcPP 3.0E
  • References:  Section 1.1, MOD_WLAN_AS_V1.0-SD, FTP_ITC.1/Client, FAU_STG_EXT.1.3. FAU_STG_EXT.1.4, FAU_STG_EXT.1.5, FAU_STG_EXT.1.6, FPT_TST_EXT.1.1, FPT_TST_EXT.1.2, FTP_ITC.1.2
• 0807 – Corrections for WLAN AS CC Conformance
  • References:  FAU_GEN.1/WLAN, FMT_SMF.1/AccessSystem, FTP_ITC.1/Client, Table 3, FCS_RADSEC_EXT.2.1
• 0680 – OS 4.2.1 Conformance Claims section updated to allow for MOD_WLAN_CLI_v1.0
  • References:  Section 2
• 0679 – Handling Standalone WLANAS TOEs with Single Interfaces
  • References:  FTA_TSE.1
• 0651 – WLAN AS as Distributed and Non-distributed TOE
  • References:  Sections 1, 5 and 6