The Cisco 5921 Embedded Services Router (ESR) is a software-only solution used to construct IP networks by interconnecting multiple smaller networks or network segments. The focus of this evaluation is on the IPsec Virtual Private Network (VPN) client that is part of the ESR. The ESR provides VPN client session capabilities that provide secure tunnels to authenticated remote endpoints or gateways. The ESR encrypts all information that flows between itself and its VPN gateway or IPsec peer.
\r\n","evaluation_configuration":"","security_evaluation_summary":"\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Cisco 5921 Embedded Services Router was judged is described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 3. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 3. Leidos (formerly SAIC) determined that the product, when delivered and configured as identified in the Cisco 5921 Embedded Services Router Common Criteria Operational User Guidance And Preparative Procedures document, satisfies all of the security functional requirements stated in the Cisco 5921 Embedded Services Router Security Target, Version 1.0, June 22, 2015. The project underwent CCEVS Validator review. The evaluation was completed in June 2015. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"\r\nCryptographic Support
\r\nThe TOE includes NIST-validated cryptographic algorithms that provide key management, random bit generation, encryption/decryption, digital signature and secure hashing and key-hashing features in support of IPsec connections. In addition, the TOE can use X.509v3 certificates for authenticating IPsec sessions. Note that in order to be in the evaluated configuration, the TOE must be configured in FIPS mode, which ensures the TOE’s configuration is consistent with the FIPS 140-2 standard.
\r\nFull Residual Information Protection
\r\nThe TOE ensures that all information flows from the TOE do not contain residual information from previous traffic. Packets are padded with zeroes. Residual data is never transmitted from the TOE.
\r\nIdentification and Authentication
\r\nThe TOE performs device-level authentication of the remote device (IPsec peers or VPN Gateway). Device-level authentication allows the TOE to establish a secure channel with a trusted peer. The secure channel is established only after each device authenticates the other. Device-level authentication is performed via IKE/IPsec mutual authentication. The TOE uses X.509v3 certificates as defined by RFC 5280 to support authentication for IPsec sessions.
\r\nSecurity Management
\r\nThe TOE provides all the capabilities necessary to securely manage the TOE. The administrative user can connect to the TOE, using the Command Line Interface (CLI) to perform these functions, via IPsec, SSH, a terminal server, or at the local console. All of these functions can be performed via the CLI either locally or remotely.
\r\nThe specific evaluated management capabilities provided by the TOE are:
\r\n· Configuration of IKE protocol version(s) used,
\r\n· Configure IKE authentication techniques used,
\r\n· Configure the session key lifetimes of no greater than an hour,
\r\n· Configure certificate revocation check,
\r\n· Specify the algorithm suites that may be proposed and accepted during the IPsec exchanges,
\r\n· Load X.509v3 certificates used by the security functions in this ST,
\r\n· Ability to update the TOE, and to verify the updates,
\r\n· Specify VPN gateways to use for connections,
\r\n· Specify client credentials to be used for connections,
\r\n· Accept or deny the validity of the certificate.
\r\nThe TOE provides the ability for Authorized Administrators to configure the VPN gateways the VPN client will connect to. The client credentials can be a client X.509 certificate and/or pre-shared key that are used for authentication to the VPN Gateway.
\r\nProtection of the TSF
\r\nThe TOE protects against interference and tampering by untrusted subjects by providing a complete implementation of the Cisco IOS software. Finally, the TOE performs testing to verify correct operation of the router itself and that of the cryptographic module. Whenever any system failures occur within the TOE the TOE will cease operation. The TOE is able to verify any software updates prior to the software updates being installed on the TOE to avoid the installation of malicious software.
\r\nTrusted Channels
\r\nThe TOE initiates IPsec tunnels with remote IPsec peers and VPN Gateways.
\r\n","features":[]}