Internet Security Systems' (ISS) Proventia A-Series, Proventia G-Series, RealSecure Network Sensor, and SiteProtector TOE is an automated real-time intrusion detection system (IDS) designed to protect 10/100/1000 Mbps copper and 1000 Mbps SX network segments. The TOE unobtrusively analyses and responds to activity across computer networks.
\r\nProventia A-Series, Proventia G-Series, and RealSecure Network Sensor provide the IDS functionality by monitoring a network or networks and comparing incoming packets against known packet patterns that indicate a potential security violation. If a match occurs, Proventia A-Series, Proventia G-Series and/or RealSecure Network Sensor will create an audit record. SiteProtector provides management, monitoring and configuration functions to users.","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the ISS Proventia A-Series, Proventia G-Series, RealSecure Network Sensor, and SiteProtector TOE meets the security requirements contained in the Security Target.
\r\nThe criteria against which the ISS Proventia A-Series, Proventia G-Series, RealSecure Network Sensor, and SiteProtector TOE were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.2. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2. The COACT, Inc. CAFE Lab determined that the evaluation assurance level (EAL) for the ISS Proventia A-Series, Proventia G-Series, RealSecure Network Sensor, and SiteProtector TOE is EAL 2. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target.
\r\nA Validator on behalf of the CCEVS Validation Body monitored the evaluation carried out by the COACT, Inc. CAFE Lab. The evaluation was completed in June 2006. Results of the evaluation and associated validation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report.
","environmental_strengths":"The TOE's Security Functions are:
\r\nAudit Security Function: The TOE's Audit Security Function provides audit data generation, selective auditing, audit data viewing and selective audit data viewing.
\r\nDetection Security Function: The TOE provides Detection Security Functionality by continuously monitoring network traffic and monitoring the TOE components to report network outages.
\r\nProtect Security Function: The TOE Protect Security Functionality provides functionality that protects its TSF Data and TOE functions from unauthorized access.
\r\nManagement Security Function: The TOE's Management Security Function provides an interface that enables a user to manage and monitor the TOE.
\r\n","features":[]}