Infoblox Trinzic Appliances with NIOS v6.3 (Models: IB-810, IB-820, IB-1400, IB-1410, IB-1420, IB-2200, IB-2210, IB-2220, IB-4000 and IB-4010) are a family of network appliances which consolidate the delivery and management of core IP network services historically provided by multiple general purpose operating systems and servers (core IP network services include DNS, DHCP, IPAM, FTP, TFTP, and HTTP).
","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the product meets the security requirements contained in the Security Target. The criteria against which the Infoblox Trinzic Appliances with NIOS v6.3 (Models: IB-810, IB-820, IB-1400, IB-1410, IB-1420, IB-2200, IB-2210, IB-2220, IB-4000 and IB-4010) were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 3. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 3. Computer Sciences Corporation determined that the evaluation assurance level (EAL) for the product is EAL 2+. The product satisfies all of the security functional requirements stated in the Security Target. A team of validators, on behalf of the CCEVS Validation Body, monitored the evaluation carried out by Computer Sciences Corporation. The evaluation was completed in November 2012.
","environmental_strengths":"The TOE provides the following security features:
\r\nSecure Management
\r\nAdministrators manage the TOE via a TLS protected web GUI or via the CLI console port. The TOE implements role based access control, password based authentication and auditing of management functions. Communication with the TOE’s API interface is protected by TLS.
\r\nHigh Availability
\r\nThe TOE enforces quotas on exhaustible resources thereby preventing failover due to resource exhaustion.
\r\nTrusted Updates
\r\nThe TOE uses digital signatures to verify updates prior to installation.
\r\nSelf protection
\r\nThe TOE performs self-test at startup to verify the integrity of hardware components and the cryptographic module.
\r\nSecure DNS
\r\nThe TOE employs secure DNS protocols to verify and authenticate DNS updates.
\r\nSecure Grid
\r\nThe TOE uses an SSL/TLS VPN to protect communication between itself and other TOE instances when deployed in a grid.
","features":[]}