Check Point VPN-1 NGX R65 is a network perimeter security device that provides controlled connectivity between two or more network environments. It mediates information flows between clients and servers located on internal and external networks governed by the firewall.
\r\nThe product provides a broad set of information flow controls, including traffic filtering, application-level proxies and intrusion detection and prevention capabilities. IPSec and
\r\nSSL VPN functionality encrypts and authenticates network traffic to and from selected peers, in order to protect the traffic from disclosure or modification over untrusted networks. Management can be performed either locally or remotely using management interfaces that are included in the Target of Evaluation (TOE).
\r\nThe claimed security functionality described in the Security Target is a subset of the product's full functionality. The evaluated configuration is a subset of the possible configurations of the product, established according to the evaluated configuration guidance.
\r\nThe security functionality within the scope of the evaluation included traffic filtering, where information flow control programs coded in Check Point’s patented INSPECT language; intrusion detection and prevention (IDS/IPS) integrated with the traffic-filtering functionality, matching traffic with predefined attack signatures, and providing recording, analysis and reaction capabilities , Virtual private networking (VPN) , centralized security management, and auditing.
","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the TOE meets the security requirements contained in the Security Target. The criteria against which the TOE was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 2.2, Revision 256. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 2.2, Revision 256. Science Application International Corporation (SAIC) determined that the evaluation assurance level (EAL) for the TOE is EAL 4 augmented with AVA_VLA.3 and ALC_FLR.3. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target. Several validators on behalf of the CCEVS Validation Body monitored the evaluation carried out by SAIC. The evaluation was completed in March 2009. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for Check Point VPN-1 NGX R65 prepared by CCEVS.
","environmental_strengths":"Check Point VPN-1 NGX R65 is a network perimeter security device that provides controlled connectivity between two or more network environments. The TOE provides security functionality that includes traffic filtering, intrusion detection and prevention (IDS/IPS), Virtual private networking (VPN), as well as security management, audit and Protection of the TSF. Check Point VPN-1 NGX R65 provides a level of protection that is appropriate for IT environment that require that information flows be controlled and restricted among network nodes where the Check Point components can be appropriately protected from physical attacks.
","features":[]}