NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems

Short Name: ep_wids_v1.0

Technology Type: Wireless Monitoring

CC Version: 3.1

Date: 2016.10.06

Succeeded By: mod_wids_v1.0

Sunset Date: 2021.02.01

Conformance Claim: None

Protection Profile 

PP OVERVIEW

This EP specifically addresses Wireless Intrusion Detection/Prevention Systems (WIDS/WIPS). A conformant WIDS/WIPS is a product that provides network security administrators with the ability to monitor, collect, log, and react in real-time to potentially malicious network traffic. A WIDS typically consists of multiple sensors that passively scan their surrounding RF environment on the WLAN radio frequency spectrum for IEEE 802.11 traffic and a centralized mechanism such as a Server or Controller that processes the data collected by the sensors. The WIDS/WIPS could use an Embedded (be part of the WLAN infrastructure) or Overlay (independent from WLAN) architecture depending on vendor implementation.

This EP is focused on inspecting layers 1 and 2 of the OSI network model as the traffic that the WIDS/WIPS monitors is wireless frames in the RF spectrum utilized by IEEE 802.11 a, b, g, n, and ac. Requirements for other technologies (e.g., cellular) and protocols are optional.

This U.S. Government Approved Protection Profile is not assigned to any Validated Products

Archived Related Technical Decisions

• 0314 – Modifications to support Selection Based requirements
• 0306 – Update to FAU_WID_EXT.2.1 and FAU_WID_EXT.2.2
• 0275 – Corrections to FAU_WID_EXT.2.1 and FAU_WID_EXT.3.1
• 0222 – Use of RF Jammer for DoS testing in WIDS EP