The TOE is the Extreme Networks Summit Series Switches EXOS v22.3.1.4-patch1CC-2 that consists of the Summit x870, Summit x690, Summit x620, Summit x440-G2, Summit x450-G2, Summit x460-G2, and Summit x670-G2 series switches. It provides high density layer 2/3 switching with low latency cut-through switching and IPv4 and IPv6 unicast and multicast routing to enable enterprise aggregation and core backbone deployments.
\r\nThe TOE consists of both hardware and software components. Each software version is identifiable by the unique build number. Each hardware profile provides a defined set of performance characteristics - switching bandwidth, latency, and port density while offering consistent level of security features.
","evaluation_configuration":"","security_evaluation_summary":"\r\n\r\nThe evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. The TOE was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 3.1 R5.
\r\nThe evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 R5.
\r\nCygnaCom Solutions has determined that the product meets the security criteria in the Security Target, which specifies compliance with collaborative Protection Profile for Network Devices v2.0.
\r\nA team of validators, on behalf of the CCEVS Validation Body, monitored the evaluation. The evaluation was completed December 2017.
","environmental_strengths":"\r\n\r\nThe TOE is classified as a Network Device.
\r\nThe EXOS utilizes firmware cryptographic module based on OpenSSL. This cryptographic module exclusively implements all cryptographic functionality and operates in the FIPS mode. The cryptographic module does not include protocol key establishment functionality, NIST SP800-56B conformance is vendor affirmed. However, EXOS is separately certified for SSH and TLS KDF. The cryptographic library is capable of supporting additional, outside of the scope, cryptographic primitives but such functionality is disabled in the evaluated configuration.
\r\nThe TOE’s EXOS v22.3.1.4-patch1CC-2 exclusively relies on the firmware cryptographic module based on OpenSSL operating in FIPS mode to implement all cryptographic security functionality. The cryptographic module’s functionality is validated through NIST Cryptographic Algorithm Validation Program (CAVP).
\r\nThe TOE is designed to provide the following functionality:
\r\no Audit record generation for security-relevant events
\r\no Interoperability with a remote audit server
\r\no User access policies
\r\no Password and certificate based authentication
\r\no Local and remote administration
\r\no Self-testing on power-up
\r\no Trusted update
\r\no Role-based access control
\r\no Session timeout and lockout
\r\n