{"product_id":10115,"v_id":10115,"product_name":"Computer Associates eTrust Security Command Center r8 SP1 with_CR2 patch","certification_status":"Not Certified","certification_date":"2007-01-26T00:01:00Z","tech_type":"Enterprise Security Management","vendor_id":{"name":"CA Technologies","website":"www.ca.com"},"vendor_poc":"William F. Clark","vendor_phone":"703-708-3501","vendor_email":"william.clark@ca.com","assigned_lab":{"cctl_name":"CygnaCom Solutions, Inc"},"product_description":"

eTrust Security Command Center™ (SCC) is a software application that provides users the ability to manage and monitor the security of an enterprise at many different levels and offers customizable views, ranging from executive-level summaries to views specially designed for network security specialists.

\r\n

eTrust SCC allows security event data and audit data to be collected from a diverse set of systems, applications, devices and appliances and then provides the ability to analyze data, set rules for alerts based on events or correlations of events, and perform reporting. eTrust SCC provides capabilities to create and manage a centralized policy regarding the retention of audit information. In addition, eTrust SCC provides tools to monitor the status of network resources and to manage products that reside on the network. eTrust SCC includes eTrust Audit, an audit data collector and analyzer, to further enhance the ability to analyze audited events on diverse systems throughout an enterprise.

","evaluation_configuration":"

The evaluated configuration includes the eTrust SCC, eTrust Audit Policy Manager and Audit Data Tools installed on MS Windows 2000 platforms. MS Windows XP and MS Windows 2000 environment was used to test the managed node features, i.e., nodes from which audit data was collected.

\r\n
\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n
eTrust Security Command Center
Tested Configuration
eTrust SCC Server
\r\n eTrust Audit Policy Manager
\r\n eTrust Audit Client
\r\n Server-Side Product Integration Kits (PIKs)
Windows 2000 Server with SP4
Minimum Hardware Requirements
Pentium-III, 1.4 GHz processor
1000 MB RAM
6000 MB Disk Space
Database Requirements
Microsoft SQL Server 2000 SP3
Software:
TCP/IP
\r\n Microsoft Internet Explorer 6.0
\r\n
\r\n
\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n
eTrust Audit Data Tools Server
Tested Configuration
eTrust Audit Data Tools
\r\n eTrust Security Command Center Agent
Windows 2000 Server with SP4
Minimum Hardware Requirements
Pentium 1 GHz
1000 MB RAM
6000 MB Disk Space
Database Requirements
Microsoft SQL Server 2000 SP3
Software:
TCP/IP
\r\n
\r\n
\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n
Client Machine
Tested Configuration
eTrust Security Command Center Agent
\r\n eTrust Audit Client
\r\n Agent-Side PIKs
Windows XP
Minimum Hardware Requirements
Pentium 1 GHz
128 MB RAM
100 MB Disk Space
Software
TCP/IP
\r\n Microsoft Internet Explorer 6.0
\r\n
","security_evaluation_summary":"

The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. CA eTrust SCC was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 2.2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2. CygnaCom Solutions has determined that the product meets the security criteria in the Security Target, which specifies an assurance level of EAL2. A validator, on behalf of the CCEVS Validation Body, monitored the evaluation. The evaluation was completed in January 2007.

","environmental_strengths":"

The TOE provides the following security services:

\r\n

Security Audit: eTrust SCC has the following security auditing functions:

\r\n\r\n

Identification and Authentication: eTrust SCC provides user identification through user accounts and password-based authentication.

\r\n

Security Management: eTrust SCC provides security management through the use of the administration capabilities of the web-based user interface. Access to management functions and data is controlled through the use of administrator roles.

\r\n

Partial Protection of the TSF: eTrust SCC protects its security functions and data from interference and tampering through its own interfaces in conjunction with protection from the IT environment.

\r\n","features":[]}