Cisco Jabber for Windows streamlines communications and enhances productivity by unifying presence, instant messaging, video, voice, voice messaging, screen sharing, and conferencing capabilities securely into one client on your desktop. Cisco Jabber for Windows delivers highly secure, clear, and reliable communications. It offers flexible deployment models, is built on open standards, and integrates with commonly used desktop applications.
\r\nThe Cisco Jabber application is a soft phone with wideband and high-fidelity audio, standards based high-definition video (720p), and desk-phone control features. These features mean that high-quality and high-availability voice and video telephony is available on users’ desk phones, soft clients, and mobile devices.
\r\nCisco Jabber OS is a Cisco-developed highly configurable proprietary operating system that provides for efficient and effective unified communications application.
","evaluation_configuration":"\r\n\r\nThe TOE is software-only comprised of the Jabber OS software image Release 11.0.
","security_evaluation_summary":"\r\n\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Cisco Unified Communications Manager (CUCM) were evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 4. Acumen Security determined that the evaluation assurance level (EAL) for the product is EAL 1. The product, when delivered configured as identified in the Cisco Jabber for Windows Common Criteria Operational User Guidance and Preparative Procedures document, satisfies all of the security functional requirements stated in the Cisco Jabber for Windows Security Target. The project underwent CCEVS Validator review. The evaluation was completed in August 2015. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"\r\n\r\nCryptographic Support
\r\nThe TOE Client Device Platform provides cryptography in support of other Cisco Jabber for Windows security functionality. This cryptography has been validated for conformance to the requirements of FIPS 140-2 Level 1. The TOE Client Device Platform provides cryptography in support of SIP connections via Security Real-Time Transport Protocol (SRTP) that has been established using the Session Description Protocol (SDP) and the Security Descriptions for Media Streams (SDES) for SDP. The TOE also protects communications between itself and the CUCM SIP Server by using a Transport Layer Security (TLS)-protected signaling channel. The TOE Client Device Platform uses the X.509v3 certificate for securing TLS and SDES/SRTP connections.
\r\nUser Data Protection
\r\nThe TOE ensures that voice data is not transmitted when a call is placed on hold, call placed on mute and when not connected.
\r\nIdentification and Authentication
\r\nThe TOE Client Device Platform provides validates certificates using Online Certificate Status Protocol (OCSP). The certificates are used to support authentication for SDES/SRTP and TLS connections.
\r\nSecurity Management
\r\nThe TOE Client Device Platform provides the capability to manage the following functions:
\r\n· Configure cryptographic algorithms;
\r\n· Load X5.09v3 certificates;
\r\n· Configure certificate revocation check; and
\r\n· Ability to update the TOE, and to verify the updates.
\r\nThe TOE Client Device Platform supports the administrative user to perform the above security relevant management functions.
\r\nProtection of the TSF
\r\nThe TOE Client Device Platform protects against interference and tampering by untrusted subjects by implementing authentication and access controls to limit configuration to the administrative user.
\r\nThe TOE is able to verify any software updates prior to the software updates being installed on the TOE to avoid the installation of unauthorized software.
\r\nTrusted Path/Channel
\r\nThe TOE allows secure communications between itself and a remote CUCM SIP Server using TLS.
","features":[]}