The Cisco Unified Communications Manager (CUCM) is a hardware and software-based, call-processing product that provides call processing, services, and applications. The CUCM integrates real-time enterprise communications including, but not limited to, instant messaging (e.g. chat), voice that includes IP telephony, mobility features, call control and unified messaging.
","evaluation_configuration":"\r\n\r\nCUCM serves as the hardware and software-based call-processing component of the Cisco Unified Communications family of products
","security_evaluation_summary":"\r\n\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Cisco Unified Communications Manager (CUCM) were evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 4. The product, when delivered configured as identified in the Cisco Unified Communications Manager (CUCM) Common Criteria Operational User Guidance and Preparative Procedures document, satisfies all of the security functional requirements stated in the Cisco Unified Communications Manager Security Target and assurance requirements defined in the Protection Profile for Network Devices Version 1.1 and Network Device Protection Profile Extended Package SIP Server, Version 1.1. The project underwent CCEVS Validator review. The evaluation was completed in August 2015. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"\r\n\r\nSecurity audit
\r\nThe Cisco CUCM provides extensive auditing capabilities. The TOE can audit events related to cryptographic functionality, identification and authentication, and administrative actions. The Cisco CUCM generates an audit record for each auditable event. Each security relevant audit event has the date, timestamp, event description, and subject identity. The administrator configures auditable events, performs back-up operations, and manages audit data storage. The TOE audit event logging is centralized and enabled by default. Audit logs can be backed up over a secure TLS channel to an external audit server.
\r\nFull Residual Information Protection
\r\nThe TOE ensures that all information flows from the TOE do not contain residual information from previous traffic. Residual data is never transmitted from the TOE.
\r\nIdentification and Authentication
\r\nThe TOE provides authentication services for administrative users to connect to the TOEs GUI administrator interface. The TOE requires Authorized Administrators to be successfully identified and authenticated prior to being granted access to any of the management functionality. The TOE can be configured to require a minimum password length of 15 characters. The TOE provides administrator authentication against a local user database using the GUI interface accessed via secure HTTPS connection.
\r\nSecurity Management
\r\nThe TOE provides secure administrative services for management of general TOE configuration and the security functionality provided by the TOE. All TOE administration occurs either through a secure HTTPS session or via a local console connection. The TOE provides the ability to securely manage:
\r\n· All TOE administrative users;
\r\n· All identification and authentication;
\r\n· All audit functionality of the TOE;
\r\n· All TOE cryptographic functionality;
\r\n· Update to the TOE; and
\r\n· TOE configuration
\r\nThe TOE supports the security administrator role. Only the privileged administrator can perform the above security relevant management functions.
\r\nAdministrators can create configurable login banners to be displayed at time of login.
\r\nProtection of the TSF
\r\nThe TOE protects against interference and tampering by untrusted subjects by implementing identification, authentication, and access controls to limit configuration to Authorized Administrators. The TOE prevents reading of cryptographic keys and passwords. Additionally Cisco CUCM is not a general-purpose operating system and access to Cisco CUCM memory space is restricted to only Cisco CUCM functions.
\r\nThe TOE initially synchronizes time with an NTP server and then internally maintains the date and time. This date and time is used as the timestamp that is applied to audit records generated by the TOE.
\r\nThe TOE performs testing to verify correct operation of the system itself and that of the cryptographic module.
\r\nFinally, the TOE is able to verify any software updates prior to the software updates being installed on the TOE to avoid the installation of unauthorized software.
\r\nTOE Access
\r\nThe TOE can terminate inactive sessions after an Authorized Administrator configurable time-period. Once a session has been terminated the TOE requires the user to re-authenticate to establish a new session.
\r\nThe TOE can also be configured to display an Authorized Administrator specified banner on the GUI management interface prior to accessing the TOE.
\r\nTrusted path/Channels
\r\nThe TOE allows trusted paths to be established to itself from remote administrators over HTTPS and initiates secure HTTPS connections to transmit audit messages to remote syslog servers. The TOE also allows secure communications between itself and a SIP Client and between itself and another SIP Server using TLS.
","features":[]}