The TOE provides the following functions related to SFPs:
\r\nA) Printing – producing a hardcopy document from its electronic form
\r\nAll of the SFPs included in this evaluation provide the same security functionality. Their differences are in the speed of printing and support for color operations.
","evaluation_configuration":null,"security_evaluation_summary":"The evaluation was carried out in accordance to the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The evaluation demonstrated that the Lexmark MS610e(LW20.PR4.P235CC), MS810e(LW20.DN4.P231CC), MS812e(LW20.DN7.P231CC), M3150(LW20.PR4.P235CC), M5155(LW20.DN4.P231CC), M5163(LW20.DN4.P231CC), M5170(LW20.DN7.P231CC), and CS510(LW20.VY4.P231CC) Single Function Printers meet the security requirements contained in the Security Target.
\r\nThe criteria against which the Lexmark Single Function Printers were judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1.
\r\nThe COACT, Inc. CAFE Lab determined that the evaluation assurance level (EAL) for the Lexmark Single Function Printers is EAL 2 augmented with ALC_FLR.2. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target.
\r\nA Validator on behalf of the CCEVS Validation Body monitored the evaluation carried out by the COACT, Inc. CAFE Lab. The evaluation was completed in January 2014. Results of the evaluation and associated validation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report.
","environmental_strengths":"The TOE’s Security Functions are:
\r\nAudit Generation - The TOE generates audit event records for security-relevant events and transmits them to a remote IT system using the syslog protocol.
\r\nIdentification and Authentication - The TOE supports I&A with a per-user selection of internal accounts (processed by the TOE) or integration with an external LDAP server (in the operational environment). PKI authentication may also be specified, in which case all authentication must use PKI. A Backup Password mechanism may also be enabled.
\r\nAccess Controls - Access controls configured for functions (e.g. fax usage) and menu access are enforced by the TOE.
\r\nManagement - Through web browser sessions, authorized administrators may configure access controls and perform other TOE management functions.
\r\nD.DOC Wiping - In the evaluated configuration, the TOE automatically overwrites RAM used to store user data as soon as the buffer is released.
\r\nSecure Communication - The TOE protects the confidentiality and integrity of all information exchanged over the attached network by using IPSec with ESP for all network communication.
\r\nSelf Test - During initial start-up, the TOE performs self tests on its hardware components and the integrity of the building blocks and security templates.
","features":[]}