NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: mod_authsvr_v1.0

Technology Type: Network Device

CC Version: 3.1

Date: 2023.01.25

Transition End Date: 2023.07.25

Preceded By: pp_ndcpp_app_authsvr_ep_v1.0

Conformance Claim: None

Protection Profile 

Supporting Docs 

Control Mapping 

PP OVERVIEW

This PP-Module describes security requirements for an authentication server and is intended to provide a minimal baseline set of requirements that are targeted at mitigating well defined and described threats. Authentication server products allow enterprises to provide a centralized and standardized method of evaluating user authentication requests made throughout the enterprise. This enables centralized definition of user identity and credential data and allows for uniform application of authentication policies that define what credentials and user attributes are necessary to gain access to various systems and applications in the enterprise environment. This PP-Module focuses specifically on RADIUS authentication servers.

This introduction describes the features of a compliant Target of Evaluation (TOE) and discusses how this PP-Module is to be used in conjunction with the Network Device collaborative Protection Profile (NDcPP) or the Application Software Protection Profile (App PP).

This U.S. Government Approved Protection Profile is not assigned to any Validated Products

Active Related Technical Decision

• 0818 – Clarification to FCS_RADIUS_EXT.1 testing
  • References:  FCS_RADIUS_EXT.1, MOD_AUTHSVR_V1.0-SD