The TOE is comprised of four models of the FireEye HX Series Appliances as shown below.
\r\n| \r\n \r\n | \r\n\r\n HX 4402 \r\n | \r\n\r\n HX 4502 \r\n | \r\n\r\n HX 4502D \r\n | \r\n
| \r\n Motherboard Ports \r\n | \r\n\r\n 2x 1GigE BaseT \r\n | \r\n\r\n 2x 1GigE BaseT \r\n | \r\n\r\n 2x 1GigE BaseT \r\n | \r\n
| \r\n Addon Ports \r\n | \r\n\r\n N/A \r\n | \r\n\r\n 2x 1GigE BaseT \r\n | \r\n\r\n 2x 1GigE BaseT \r\n | \r\n
| \r\n Storage \r\n | \r\n\r\n 4x 1.8 TB disk, 3.6 TB virtual disk RAID 10 \r\n | \r\n\r\n 4x 4TB disk / 8TB virtual disk RAID 10 \r\n | \r\n\r\n 4x 4TB disk / 8TB virtual disk RAID 10 \r\n | \r\n
| \r\n Enclosure \r\n | \r\n\r\n 1RU rack server \r\n | \r\n\r\n 1RU rack server \r\n | \r\n\r\n 1RU rack server \r\n | \r\n
| \r\n Processor \r\n | \r\n\r\n AMD Opteron 6328 (Piledriver) \r\n | \r\n\r\n Intel Xeon E3-1240 v6 (Kaby Lake) \r\n | \r\n\r\n Intel Xeon E3-1240 v6 (Kaby Lake) \r\n | \r\n
| \r\n TOE Type \r\n | \r\n\r\n Stand-alone physical network device \r\n | \r\n\r\n Stand-alone physical network device \r\n | \r\n\r\n Stand-alone physical network device \r\n | \r\n
\r\n
Table 1 HX Series Appliances
\r\n\r\n
| \r\n \r\n | \r\n\r\n HX 4502v \r\n | \r\n
| \r\n Network Ports \r\n | \r\n\r\n 2x 1GigE interfaces \r\n | \r\n
| \r\n CPU Cores \r\n | \r\n\r\n 8 \r\n | \r\n
| \r\n Memory \r\n | \r\n\r\n 64 GB \r\n | \r\n
| \r\n Storage \r\n | \r\n\r\n 3600 GB \r\n | \r\n
| \r\n Processor \r\n | \r\n\r\n Intel Xeon E5-4620 v4 (Broadwell) \r\n | \r\n
| \r\n Hypervisor \r\n | \r\n\r\n VMware vSphere ESXi 6.7 \r\n | \r\n
| \r\n TOE Type \r\n | \r\n\r\n Stand-alone virtual network device \r\n | \r\n
\r\n
Table 2 HX Series Appliances
\r\n\r\n
The TOE is a hardware and software solution that is comprised of the security appliance models described above. The TOE guidance documentation that is considered to be part of the TOE is the FireEye HX Series Appliances v5.0.1 Common Criteria Guidance Addendum, V1.2, document which is downloadable from the FireEye website.
\r\nThe network on which the TOE resides is considered part of the environment. The evaluated software is pre-installed and is identified as software version 5.01. Software updates are downloadable from the FireEye website. A login ID and password are required to download the software update from the FireEye website.
","evaluation_configuration":"","security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the FireEye HX Series Appliances was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 5. The product, when delivered configured as identified in the FireEye HX Series Appliances v5.0.1 Common Criteria Guidance Addendum, satisfies all of the security functional requirements stated in the FireEye HX Series Appliances v5.0.1 Common Criteria Security Target. The project underwent CCEVS Validator review. The evaluation was completed in May 2021. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"o TLS connectivity with the following entities:
\r\n§ Audit Server
\r\n§ Management Web Browser
\r\no SSH connectivity with the following entities:
\r\n§ Management SSH Client
\r\no Local console CLI administration
\r\no Remote CLI administration via SSHv2
\r\no Remote GUI administration via HTTPS/TLS
\r\no Administrator authentication using a local database
\r\no Timed user lockout after multiple failed authentication attempts
\r\no Password complexity enforcement
\r\no Role Based Access Control - the TOE supports several types of administrative user roles. Collectively these sub-roles comprise the “Security Administrator”
\r\no Configurable banners to be displayed at login
\r\no Timeouts to terminate administrative sessions after a set period of inactivity
\r\no Protection of secret keys and passwords
\r\n