The Target of Evaluation (TOE) is the Aruba Remote Access Point Version 6.5.0-FIPS.
","evaluation_configuration":"","security_evaluation_summary":"\r\n\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The product was evaluated at an Evaluated Assurance Level EAL1. The criteria against which the Aruba Remote Access Point Version 6.5.0-FIPS was judged are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 4. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 4. The product, when delivered and configured as identified in the Aruba VPN Client Protection Profile, Common Criteria Configuration Guide Version 1.3, November 2016 document, satisfies all of the security functional requirements stated in the Aruba Remote Access Point Version 6.5.0-FIPS Security Target, v1.0, 09 February 2017. The project underwent CCEVS Validator review. The evaluation was completed in November 2016. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"\r\n\r\nCryptographic Support
\r\nThe TOE is a FIPS certified cryptographic module: the ArubaOS 6.5.0-FIPS (cert #2182). The cryptographic module only employs FIPS-Approved DRBG, key generation, establishment, zeroization, encryption, digital signature, and hashing algorithms as specified by the FCS requirements.
\r\nUser Data Protection
\r\nThe TOE ensures that any data packets passing through do not inadvertently contain any residual information that might be disclosed inappropriately.
\r\nIdentification and Authentication
\r\nRemote authentication for the TOE is provided by RSA or ECDSA certificate-based RAP provisioning. The TOE supports Distinguished Name (DN) peer identifiers for certificate-based peer authentication. The TOE uses X.509v3 certificates as defined by RFC 5280 to support authentication for IPsec sessions.
\r\nSecurity Management
\r\nThe administrator may configure the TOE via a WebUI or CLI interface on the RAP to specify the IP address of the Aruba Master Controller, loading and managing certificates, and the identification of client credentials to be used for connections in order to establish an IPsec VPN connection.
\r\nThe TOE is managed by an administrator via the Aruba Master Controller (i.e. the VPN Gateway) to configure the VPN tunnel and all security functions identified in this Security Target.
\r\nProtection of the TSF
\r\nThe TOE provides self-tests to ensure the correct operation of the cryptographic functions and TSF hardware. The TOE verifies the integrity of stored TSF executable code when it is loaded for execution.
\r\nThe TOE includes mechanisms so that the administrator can determine the TOE version and update the TOE securely using digital signatures and published hashes.
\r\nTrusted Path/Channels
\r\nThe TOE initiates an IPsec tunnel with the remote Aruba Master Controller.
","features":[]}