The CS-2000 is a multi-function solution appliance without any pre-configured network capability set programmed into the system. CloudShield allows network operators (administrators) to define policies (in the form of rule sets) that instruct the TOE to analyze, make decisions, and take action on packet data received from the network. Possible actions that the TOE can be configured to execute include inspection of any packet data, capture of portions or all packet data, modification of packet data, insertion of new packets, drop or discard of packets, and algorithm processing. The heuristics of these actions are defined by applications (rule sets) written in a high-level data plane programming language, called RAVE, designed to make the development of packet processing policies and applications easier. The RAVE programming language is the interface for administrators to configure the TOE; the RAVE language is translated to RAVE instructions by the Interactive Development Environment (part of the operating environment), and these programs are then loaded and executed on the CloudShield platform. The evaluation covers only programs written using the RAVE programming interface; the PacketC environment also supported within the development environment is outside of the scope of this evaluation.
\r\n\r\n
CloudShield’s adaptable active network device, the CS-2000, provides network operators with the flexibility to define advanced services, enforce policies with precision, and tackle complex security challenges. The CS-2000’s modular chassis houses up to two Deep Packet Processing Modules (DPPMs) and an Application Service Module (ASM). The DPPMs are capable of delivering up to 10 Gbps of full duplex, layers 2-7 content-processing capacity per system. There are three different DPPMs available, supporting three different network interface configurations, which enable operators to deploy service control and security solutions for GbE edge network, OC-48/STM-16 SONET/SDH interconnect, or 10 GbE data center and aggregation network installations. The DPPMs provide the only connection to the untrusted network being controlled or monitored by the installed RAVE applications.
\r\n\r\n
The ASM provides the management services for the device, and permits the loading of externally written RAVE programs onto the DPPMs for execution. The ASM is accessible from a separate administrative network only, and provides a web interface, a command line interface, an SNMP interface, and a programmatic interface that permits adjustment and monitoring of RAVE applicacation parameters. The ASM communicates with the DPPM over an internal gigabit network within the CS-2000 chassis that is not otherwise accessible.
\r\n\r\n
The RAVE language used by CloudShield provides the ability to perform deep packet inspection (DPI) and offers visibility and control of Layer-7 transactions, enabling the fine-grained and robust classification, measurement, security, and control of traffic and services from a single network device. This permits the implementation of state & flow tracking, in-line filtering/blocking, signature detection, protocol anomaly detection, traffic anomaly detection, and combinations of these functions. The RAVE language also offers the ability to perform L2-L7 Analysis, P2P Control, and tiered services.
\r\n\r\n
The product claims to provide extremely high reliability (99.999%) [reliability claims have not been assessed], and supports both LAN and WAN interfaces.
","evaluation_configuration":"All CS-2000 installations include the following components:
\r\nAll CS-2000 installations include at least one Deep Packet Processing Module (DPPM). The DPPMs supported by the TOE are:
\r\n\r\n
The evaluation covered the 3.0.3 version of the CPOS operating system used on the appliances. The product must be configured in accordance with the document “Secure Setup For Common Criteria Guide Release 3.0.3, 2012-01-13”.
","security_evaluation_summary":"The evaluation was performed by atsec information security corporation. The results of the evaluation can be found in the CCEVS Validation Report for Cloudshield CS-2000 with CPOS 3.0.3
","environmental_strengths":"The TOE provides the following security functions:
\r\n\r\n
\r\n
The ASM part of the TOE collects audit data and generates system audit log records for all configuration and security-relevant user actions. This provides the ability to investigate unauthorized system security and configuration activities after they occur so that proper remedial action can be taken. Configuration changes and security-related events and failures are recorded in a security audit log.
\r\n\r\n
\r\n
The ASM part of the TOE includes its own instance of a cryptographic library to support remote trusted IT products to initiate SSL connections with the TOE for the purposes of uploading rule sets and remote administration of the TOE implementing a trusted channel to a remote trusted entity.
\r\n\r\n
\r\n
The DPPM part of the TOE enforces information flow control based on defined RAVE applications. The evaluation ensures that the RAVE language constructs behave as documented
\r\n\r\n
\r\n
The ASM part of the TOE maintains security attributes for each user account, and includes the ability to assign users to groups and to define access for users, providing administrative flexibility
\r\n\r\n
\r\n
The TOE supports administrative roles which are defined by the groups assigned to human users by an authorized administrator at the time a user account is created.
\r\nEach group is granted one of three privilege levels (Read/Write, Read-only, or None) to one or more of the five management areas on the TOE: Hardware; Network; Software; Security; Configuration; Protection of the TSF.
","features":[]}