The Target of Evaluation (TOE) is Fidelis XPS™ v8.0, a network security appliance solution for advanced threat detection. It detects inappropriate and malicious network data based on attributes of the network traffic, including content, source, destination, application, and aspects of the communication channel. Fidelis XPS™ v8.0 is used to prevent the intrusion of attacks and to prevent the transmission of sensitive data, either as a result of an attack or insider threat. It analyzes network activity and can issue alerts of significant events. Fidelis XPS™ v8.0 will also collect and store metadata from the network to allow an analyst to view the context associated with alerts and to analyze network activity. The focus of this evaluation is on the TOE functionality supporting the claims in Protection Profile for Network Devices, Version 1.1, 8 June 2012, as amended by Errata #3, dated 3 November 2014. The security functionality specified in the Protection Profile includes protection of communications between TOE components and with external IT entities, identification and authentication of administrators, auditing of security-relevant events, and ability to verify the source and integrity of updates to the TOE.
\r\nA TOE deployment comprises:
\r\nOR
\r\nThe specific appliance models (including virtual appliances) included in the scope of the evaluation are as follows:
\r\nThe virtual appliances (designated by “VM” at the end of their names) were tested in a virtual environment consistent with the requirements described in the Security Target, including an Intel i7-4770 processor in the host hardware system. More generally, the virtual appliances are supported on host hardware that includes Intel Core or Xeon processors based on the Ivy Bridge or Haswell microarchitecture, which implement Intel Secure Key.
","evaluation_configuration":"","security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and policies. The criteria against which Fidelis XPS™ v8.0 was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1, Revision 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 4. The product, when delivered and configured as identified in the Fidelis XPS Enterprise Setup and Configuration Guide, satisfies all of the security functional requirements stated in Fidelis XPS™ Security Target, Version 1.0, 3 April 2015. The project underwent CCEVS Validator review. The evaluation was completed in April 2015. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"Security Audit
\r\nThe TOE is able to generate logs of security relevant events, including the events specified in NDPP. The TOE can be configured to store the logs locally so they can be accessed by an administrator and can also be configured to send the logs to a designated external log server.
\r\nCryptographic Support
\r\nThe TOE is operated in FIPS mode and includes a NIST-validated OpenSSL cryptographic module. The module provides key generation, random bit generation, encryption/decryption, digital signature and cryptographic hashing and keyed-hash message authentication capabilities in support of higher level cryptographic protocols, including HTTP over TLS.
\r\nUser Data Protection
\r\nThe TOE ensures resources used in processing network traffic are suitably cleared prior to allocation of the resource.
\r\nIdentification and Authentication
\r\nThe TOE requires users (i.e., administrators) to be successfully identified and authenticated before they can access any security management functions provided by the TOE. The TOE offers a network accessible GUI (HTTP over TLS) for interactive administrator sessions.
\r\nThe TOE supports the local (i.e., on device) definition of administrators with usernames and passwords. Additionally, the TOE can be configured to use the services of trusted LDAP/Active Directory servers in the operational environment.
\r\nSecurity Management
\r\nThe TOE provides a GUI to access the security management functions. Security management commands are limited to administrators and are available only after the administrator has provided acceptable user identification and authentication data to the TOE.
\r\nThe TOE also provides a local management capability. All administrative functionality available from the GUI is also available via direct serial console connection using the special debug account. However, the TOE is intended to be managed from a remote HTTPS/TLS client via the GUI provided by the TOE’s CommandPost component. Following the initial configuration, all changes should be performed by an authorized user from CommandPost. The TOE implements a System Administrator role that corresponds to the NDPP Security Administrator.
\r\nProtection of the TSF
\r\nThe TOE implements a number of self-protection features intended to ensure the reliability and integrity of its security features.
\r\nIt protects sensitive data such as stored passwords and cryptographic keys so that they are not accessible even by an administrator. It also provides its own timing mechanism to ensure that reliable time information is available (e.g., for log accountability).
\r\nThe TOE uses TLS and HTTPS to protect communications between distributed TOE components.
\r\nThe TOE implements a self-test integrity mechanism that verifies the integrity of each TOE process before it is started. It also includes mechanisms to verify the authenticity and integrity of software updates to ensure the updates do not introduce malicious or other unexpected changes in the TOE.
\r\nTOE Access
\r\nThe TOE can be configured to display an informative banner that will appear prior to an administrator being permitted to establish an interactive session. Prior to a user logging in, the user must indicate whether or not to continue with the authentication process. The TOE subsequently will enforce an administrator-defined inactivity timeout value after which the inactive session will be terminated.
\r\nTrusted Path/Channels
\r\nThe TOE protects interactive communications with remote administrators using HTTP over TLS. TLS ensures both integrity and disclosure protection.
\r\nThe TOE protects communications with network peers, such as log server, Fidelis Insight Server and authentication servers, using TLS connections to prevent unintended disclosure or modification of the transferred data.
","features":[]}