Secure Mail (IronMail) Software Version 6.7HF2 is used to provide a secure email connection between an enterprise network and a public network such as the internet. Secure Mail allows an organization to define a complex mail policy to protect itself against a wide variety of known and unknown emerging threats. Secure Mail resides in an all-inclusive device positioned at the network gateway in front of the customer's existing email server and is used to:
\r\n
\r\nSecure Mail processes incoming messages through a number of filtering queues, which examine the content, envelope, encryption status, and attachments for compliance against relevant organizational policies. Depending upon the policy, Secure Mail will deliver, drop, reroute, modify or quarantine the filtered messages.
\r\nSecure Mail (IronMail) software is available for delivery on a complete line of gateway appliance models which are sized to meet the needs of all organizations from small businesses to large enterprises. These appliances include a hardened operating system and are conveniently managed using a secure HTTPS connection from a web browser.
","evaluation_configuration":"
Software Identification:
\r\n Secure Mail (IronMail) Software Version 6.7HF2
\r\n MySQL server version 4.1.21
\r\nHenceforth, the above referenced software is referred to as the TOE.
TOE Environment:
\r\n Operating System:
\r\n FreeBSD version 6.2
\r\n Tested on Appliances:
\r\n E-2200
\r\n E-5200
The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the TOE meets the security requirements contained in the Security Target. The criteria against which the TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.3. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.3. Science Application International Corporation (SAIC) determined that the evaluation assurance level (EAL) for the TOE is EAL 2 augmented with ALC_FLR.2. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target. Several validators on behalf of the CCEVS Validation Body monitored the evaluation carried out by SAIC. The evaluation was completed in February 2008. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for Secure Computing IronMail® Email Security Gateway v6.7 HF2 prepared by CCEVS.
","environmental_strengths":"The TOE is a software product that is physically contained within a computer having limited physical interfaces. The computer is configured as a special purpose device or appliance, intended solely to serve as a host for the TOE software.
\r\n
\r\nThe logical relationship between the TOE and the various network components is depicted in Figure 2. The TOE is logically positioned at the network gateway between the firewall and the mail servers. Every email that enters the internal network first passes through the TOE. Similarly, only the TOE can deliver outgoing messages.
The IT environment is configured such that the TOE is the only entry point for all incoming email messages (destined to internal network) to the mail servers. Similarly, the TOE is the only exit point for all outgoing email messages (destined to external network).
\r\nThe TOE runs over a hardened operating system and includes a MySQL database that ensures high integrity and speed. The database provides a storage and retrieval mechanism for configuration information, message meta data and statistical data for reporting purposes.
\r\nAdministrators connect to the IronMail® appliance using an HTTPS secured connection from a web browser in order to maintain and monitor the TOE's operation. Authentication services are provided by the TOE.
\r\n