{"product_id":10369,"v_id":10369,"product_name":"Lexmark X463, X464, X651, X652, X654, X734 and X736 Multi-Function Printers and InfoPrint 1930, 1940, 1850, 1860, 1870, Color 1846, Color 1856 Multi-Function Printers","certification_status":"Not Certified","certification_date":"2011-02-03T00:02:00Z","tech_type":"Multi Function Device","vendor_id":{"name":"Lexmark International, Inc.","website":"http://www.lexmark.com"},"vendor_poc":"Sean Gibbons","vendor_phone":"859-232-2000","vendor_email":"gibbonss@lexmark.com","assigned_lab":{"cctl_name":"COACT, Inc. Labs"},"product_description":"
\r\n

The TOE provides the following functions related to Multi Function Printers (MFPs):

\r\n
    \r\n
  1. Printing – producing a hardcopy document from its electronic form
    2. \r\n
  2. Scanning – producing an electronic document from its hardcopy form
    3. \r\n
  3. Copying – duplicating a hardcopy document
    4. \r\n
  4. Faxing – scanning documents in hardcopy form and transmitting them in electronic form over telephone lines, and receiving documents in electronic form over telephone lines and printing them in hardcopy form
    5. \r\n
\r\n

All of the MFPs included in this evaluation provide the same security functionality. Their differences are in the speed and type (color or monochrome) of printing. For the InfoPrint MFPs, a common brand name is used for MFPs both with and without a hard drive. Therefore, the MT-Model is also included in the specification to limit the MFPs in this evaluation to only those including a hard drive.  Multiple MT-Models are listed since they distinguish options such as staplers and paper tray sizes.

\r\n
","evaluation_configuration":null,"security_evaluation_summary":"

The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the Lexmark X463 (LR.BS.P311CCa), X464 (LR.BS.P311CCa), X651 (LR.MN.P311CCa), X652 (LR.MN.P311CCa), X654 (LR.MN.P311CCa), X734 (LR.FL.P311CCa) and X736 (LR.FL.P311CCa) Multi-Function Printers and InfoPrint 1930 MT-Model 4569-g01, g02 (LR.BS.P311CCa), 1940 MT-Model 4570-g11, g12 (LR.BS.P311CCa), 1850 MT-Model 4548-g01, g02 (LR.MN.P311CCa), 1860 MT-Model 4566-gn1, gn2 (LR.MN.P311CCa), 1870 MT-Model 4567-gn1, gn2 (LR.MN.P311CCa), Color 1846 MT-Model 4913-gd1, gd2 (LR.FL.P311CCa), and Color 1856 MT-Model 4914-gd1, gd2 (LR.FL.P311CCa) Multi-Function Printers meets the security requirements contained in the Security Target.

\r\n

The criteria against which the Lexmark X463 (LR.BS.P311CCa), X464 (LR.BS.P311CCa), X651 (LR.MN.P311CCa), X652 (LR.MN.P311CCa), X654 (LR.MN.P311CCa), X734 (LR.FL.P311CCa) and X736 (LR.FL.P311CCa) Multi-Function Printers and InfoPrint 1930 MT-Model 4569-g01, g02 (LR.BS.P311CCa), 1940 MT-Model 4570-g11, g12 (LR.BS.P311CCa), 1850 MT-Model 4548-g01, g02 (LR.MN.P311CCa), 1860 MT-Model 4566-gn1, gn2 (LR.MN.P311CCa), 1870 MT-Model 4567-gn1, gn2 (LR.MN.P311CCa), Color 1846 MT-Model 4913-gd1, gd2 (LR.FL.P311CCa), and Color 1856 MT-Model 4914-gd1, gd2 (LR.FL.P311CCa) Multi-Function Printers were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1. The COACT, Inc. CAFE Lab determined that the evaluation assurance level (EAL) for the Lexmark X463 (LR.BS.P311CCa), X464 (LR.BS.P311CCa), X651 (LR.MN.P311CCa), X652 (LR.MN.P311CCa), X654 (LR.MN.P311CCa), X734 (LR.FL.P311CCa) and X736 (LR.FL.P311CCa) Multi-Function Printers and InfoPrint 1930 MT-Model 4569-g01, g02 (LR.BS.P311CCa), 1940 MT-Model 4570-g11, g12 (LR.BS.P311CCa), 1850 MT-Model 4548-g01, g02 (LR.MN.P311CCa), 1860 MT-Model 4566-gn1, gn2 (LR.MN.P311CCa), 1870 MT-Model 4567-gn1, gn2 (LR.MN.P311CCa), Color 1846 MT-Model 4913-gd1, gd2 (LR.FL.P311CCa), and Color 1856 MT-Model 4914-gd1, gd2 (LR.FL.P311CCa) Multi-Function Printers is EAL 3+.    The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target.

\r\n

The evaluation was completed in February 2011. Results of the evaluation and associated validation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report.

","environmental_strengths":"

The TOE’s Security Functions are:

\r\n

Audit Generation - The TOE generates audit event records for security-relevant events and transmits them to a remote IT system using the syslog protocol.

\r\n

Identification and Authentication - The TOE supports I&A with a per-user selection of internal accounts (processed by the TOE) or integration with an external LDAP server (in the operational environment).  PKI authentication may also be specified, in which case all authentication must use PKI.  A Backup Password mechanism may also be enabled.

\r\n

Access Control - Access controls configured for functions (e.g. fax usage) and menu access are enforced by the TOE.

\r\n

Management - Through the touch panel, authorized administrators may configure access controls and perform other TOE management functions.

\r\n

Fax Separation - The TOE ensures that only fax traffic is sent or received via the attached phone line.  Incoming traffic is processed as fax data only; no management access or other data access is permitted.  In the evaluated configuration, the only source for outgoing faxes is the scanner.

\r\n

User Data Buffer Wiping - In the evaluated configuration, the TOE automatically overwrites RAM used to store user data as soon as the buffer is released. 

\r\n

Secure Communication - The TOE protects the confidentiality and integrity of all information exchanged over the attached network by using IPSec with ESP for all network communication.

\r\n

Self Test - During initial start-up, the TOE performs self tests on its hardware components and the integrity of the building blocks and security templates.

","features":[]}