The Security Target (ST) defines the Information Technology (IT) security requirements for the Cisco Email Security Appliance (ESA) 9.1. The Target of Evaluation (TOE), Cisco Email Security Appliance (ESA), with software version AsyncOS 9.1 build 40, is a network device. ESA is an appliance that provides comprehensive email protection services for email. It is an email protection product that monitors Simple Mail Transfer Protocol (SMTP) network traffic, analyzes the monitored network traffic using various techniques, and reacts to identified threats associated with email messages (such as spam and inappropriate or malicious content). The TOE includes the hardware models as defined in Table 2. ESA was evaluated as a network device only and the email protection services were not assessed during this evaluation.
","evaluation_configuration":"\r\n\r\nThe TOE is comprised of both software and hardware. The hardware is comprised of the following: C170, C370, C670, X1070, C380, C680, and C000v, C100v, C300v, C600v running on Cisco UCS servers (blade or rack-mounted). The software is comprised of the AsyncOS 9.1 version. The TOE is comprised of the following specifications as described in the table below:
| \r\n Model \r\n | \r\n\r\n X1070 \r\n | \r\n\r\n C680 \r\n\r\n | \r\n\r\n C670 \r\n\r\n | \r\n\r\n C380 \r\n | \r\n\r\n C370 \r\n | \r\n\r\n C170 \r\n\r\n | \r\n\r\n C000v \r\n | \r\n\r\n C100v \r\n | \r\n\r\n C300v \r\n | \r\n\r\n C600v \r\n | \r\n|
| \r\n Processor \r\n | \r\n\r\n Intel Xeon E5 \r\n2x4 (2 quad cores) \r\n | \r\n\r\n Intel Xeon E5 \r\n2x6 (2 hexa cores) \r\n | \r\n\r\n Intel Xeon E5 \r\n2x4 (2 quad cores) \r\n | \r\n\r\n Intel Xeon E5 \r\n1x6 (1 hexa core) \r\n | \r\n\r\n Intel Xeon E5 \r\n1x4 (1 quad core) \r\n | \r\n\r\n Intel Xeon E5 \r\n
\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n|
| \r\n Memory \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 32 GB \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 16 GB \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n 4 GB \r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n|
| \r\n Hard disk \r\n | \r\n\r\n 1.8 TB (300 x 6), RAID 10 \r\n | \r\n\r\n 1.8 TB (600 x 3), RAID 10 \r\n | \r\n\r\n 1.2 TB (300 x 4), RAID 10 \r\n | \r\n\r\n 1.2 TB (600 x 2), RAID 10 \r\n | \r\n\r\n 600 GB (300 x 2), RAID 1 \r\n | \r\n\r\n
\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n|
| \r\n Interfaces/UCS Server \r\n | \r\n\r\n (1) USB Console Port \r\n(1) Serial Console Port \r\n(1) Management Port \r\n(3) 10/100/1000 Port \r\n | \r\n\r\n (2) USB Console Port \r\n(1) Console Port (RJ-45 connector) \r\n(1) Management Port \r\n(4) 10/100/1000 Port \r\n(2) Power Supply \r\n(1) Remote Power Management Port \r\n | \r\n\r\n (1) USB Console Port \r\n(1) Serial Console Port \r\n(1) Management Port \r\n(3) 10/100/1000 Port \r\n(2) Power Supply \r\n | \r\n\r\n (2) USB Console Port \r\n(1) Console Port \r\n(1) Management Port \r\n(4) 10/100/1000 Port \r\n(2) Power Supply \r\n(1) Remote Power Management Port \r\n\r\n | \r\n\r\n (1) USB Console Port \r\n(1) Serial Console Port \r\n(1) Management Port \r\n(4) 10/100/1000 Port \r\n(2) Power Supply \r\n | \r\n\r\n (2) USB Console Port \r\n(1) Console Port \r\n(1) Management Port \r\n(2) 10/100/1000 Port \r\n(1) Power Supply \r\n | \r\n\r\n UCS B-Series[1] \r\nor UCS C-Series[2] running ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n\r\n UCS B-Series1 \r\nor \r\nUCS C-Series2 \r\nrunning ESXi 5.1 or 5.5 \r\n\r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. Cisco Email Security Appliance (ESA) with the AsyncOS 9.1 build 40 software version was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 Revision 4. The product, when delivered configured as identified in the Cisco Email Security Appliance (ESA), with Software Version AsyncOS 9.1 CC Configuration Guide, Version 1.4 document satisfies all of the security functional requirements stated in the Cisco Email Security Appliance Security (ESA), with Software Version AsyncOS 9.1 Target, Version 1.0. The evaluation underwent CCEVS Validator review. The evaluation was completed in September 2015. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report, (report number CCEVS-VR-VID10631-2015, dated September 23, 2015) prepared by CCEVS.
","environmental_strengths":"\r\n\r\n\r\n\r\nSecurity Audit
\r\nThe TOE can audit events related to cryptographic functionality, identification and authentication, and administrative actions. The administrator configures auditable events, performs back-up operations and manages audit data storage. The TOE provides the administrator with a circular audit trail or a configurable audit trail threshold to track the storage capacity of the audit trail. Audit logs are sent via an encrypted SSHv2 channel to an external audit server.
\r\nCryptographic Support
\r\nThe TOE provides cryptography in support of secure trusted path and channel connections with administrators and other IT entities via TLS 1.0, HTTPS, and SSHv2.
\r\nUser Data Protection
\r\nThe TOE ensures that all information flows from the TOE do not contain residual information from previous traffic. Packets are padded with zeros. Residual data is never transmitted from the TOE.
\r\nIdentification and Authentication
\r\nThe TOE provides authentication services for administrative users attempting to connect to the TOE’s local console, secure remote CLI and secure remote GUI administrative interfaces. Password-based authentication can be performed on all interfaces and public key authentication is available via the secure remote CLI only. The TOE provides administrator authentication against a local user database.
\r\nSecurity Management
\r\nThe TOE provides the ability to securely manage all TOE administrative users; all identification and authentication; all audit functionality of the TOE; all TOE cryptographic functionality; the timestamps maintained by the TOE; updates to the TOE; and TOE configuration file storage and retrieval. The TOE supports multiple administrative roles that restrict access to TOE functions depending on the admin role assigned to a user. The management interfaces are the TLS/HTTPS protected GUI, the SSHv2 remote CLI, and the local console.
\r\nProtection of the TSF
\r\nThe TOE provides protection of TSF data (authentication data and cryptographic keys). In addition, the TOE internally maintains the date and time. This date and time is used as the time stamp that is applied to TOE generated audit records. This time can be set manually, or an NTP server (or servers) can be used to synchronize the date-timestamp. The TOE is also capable of verifying software updates prior to the software updates being installed. Finally, the TOE performs testing to verify correct operation of the appliance itself and the cryptographic module.
\r\nTOE Access
\r\nThe TOE can terminate inactive sessions after an Authorized Administrator configurable time-period. The TOE also allows users to terminate their own interactive session. Once a session has been terminated the TOE requires the user to re-authenticate to establish a new session. The TOE can also display a Authorized Administrator specified banner on the local console, CLI and the GUI prior to allowing any administrative access to the TOE.
\r\nTrusted Path/Channels
\r\nThe TOE establishes a trusted path between the TOE and the administrative web-based GUI using TLS/HTTPS, and between the ESA and the remote CLI using SSHv2. The TOE also establishes a secure connection for sending audit data to an external syslog server using SCP over SSHv2.
","features":[]}