The Security Target (ST) defines the Information Technology (IT) security requirements for the Cisco Identity Services Engine (ISE). The ISE v1.2 is a network device identity, authentication, and access control policy platform that enables enterprises to enforce compliance, enhance infrastructure security, and streamline service operations. ISE allows enterprises to gather real-time contextual information from networks, users, and devices. The administrator can then use that information to make proactive governance decisions by tying identity to various network elements including access switches, wireless LAN controllers (WLCs), virtual private network (VPN) gateways, and data center switches.
","evaluation_configuration":"\r\nThe Cisco ISE software runs on the Cisco Application Deployment Engine (ADE) Release 2.0 operating system (ADE-OS). The Cisco ADE-OS and Cisco ISE software run on a Cisco ISE 3400 Series appliance or on a dedicated hardware platform with a VMWare hypervisor; the hardware specifications must meet the requirements defined in the table below.
\r\n1. ISE Virtual Machine’s hardware must be dedicated. Likewise, the virtual resources will be dedicated to a single virtual machine running the ISE software.
\r\n2. It is recommended that the system specification be comparable with the 3415 or 3495 models in a production environment. This table lists the minimum system specifications for the ISE Virtual Machine to operate as validated by this evaluation.
\r\n","security_evaluation_summary":"\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. Cisco Identity Services Engine (ISE) v1.2 was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 Revision 4. Booz Allen Hamilton determined that the evaluation assurance level (EAL) for the product is EAL 1. The product, when delivered configured as identified in the Cisco Identity Services Engine (ISE) Common Criteria Operational User Guidance And Preparative Procedures version 1.0 document, satisfies all of the security functional requirements stated in the Cisco Identity Services Engine (ISE) Security Target, Version 1.0. The evaluation underwent CCEVS Validator review. The evaluation was completed in January 2014. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report, (report number CCEVS-VR-VID10521-2014, dated January 21, 2014) prepared by CCEVS.
\r\n","environmental_strengths":"\r\nSecurity Audit
\r\nThe TOE can audit events related to cryptographic functionality, identification and authentication, and administrative actions. The administrator configures auditable events, external audit servers and manages audit data storage. The TOE provides the administrator with a circular audit trail or a configurable audit trail threshold to track the storage capacity of the audit trail. Audit logs are sent via an encrypted TLS channel to an external audit server.
\r\nCryptographic Support
\r\nThe TOE provides cryptography in support of secure trusted path and channel connections with administrators and other IT entities via TLS 1.0, HTTPS, and SSHv2.
\r\nUser Data Protection
\r\nThe TOE ensures that all information flows from the TOE do not contain residual information from previous traffic. Packets are padded with zeros. Residual data is never transmitted from the TOE.
\r\nIdentification and Authentication
\r\nThe TOE provides authentication services for administrative users attempting to connect to the TOE’s local console, secure remote CLI and secure remote GUI administrative interfaces. Password-based authentication can be performed on all interfaces and public key authentication is available via the secure remote CLI only. The TOE provides administrator authentication against a local user database or optionally supports the use of a secure LDAP or Active Directory servers for authentication.
\r\nSecurity Management
\r\nThe TOE provides the ability to securely manage all TOE administrative users; all identification and authentication; all audit functionality of the TOE; all TOE cryptographic functionality; the timestamps maintained by the TOE; updates to the TOE; and TOE configuration file storage and retrieval. The TOE supports multiple administrative roles that restrict access to TOE functions depending on the admin role assigned to a user. The primary management interface is the HTTPS Cisco ISE GUI. A Command Line Interface (CLI) is also supplied for additional administration functionality.
\r\nProtection of the TSF
\r\nThe TOE provides secure transmission when TSF data is transmitted between separate parts of the TOE and is able to detect modification of information and/or operations. The TOE also provides protection of TSF data (authentication data and cryptographic keys). In addition, the TOE internally maintains the date and time. This date and time is used as the time stamp that is applied to TOE generated audit records. This time can be set manually, or an NTP server (or servers) can be used to synchronize the date-timestamp. The TOE is also capable of ensuring software updates are from a reliable source. Finally, the TOE performs testing to verify correct operation.
\r\nTOE Access
\r\nThe TOE can terminate inactive sessions after an authorized administrator configurable time-period. The TOE also allows users to terminate their own interactive session. Once a session has been terminated the TOE requires the user to re-authenticate to establish a new session. The TOE can also display a Security Administrator specified banner on the CLI and the web-based management interface prior to allowing any administrative access to the TOE.
\r\nTrusted Path/Channels
\r\nThe TOE establishes a trusted path between the ISE and the administrative web-based GUI using TLS/HTTPS, and between the ISE and the remote CLI using SSH. The TOE also establishes a secure connection for sending syslog data to an external syslog server using TLS and uses TLS-protected communications with external authentication stores.
\r\n","features":[]}