Fortinet’s FortiWLM Wireless Manager 8.5 offers full management of Fortinet controllers and access points along with an extensive set of troubleshooting and reporting tools, all in a single pane of glass. The Wireless Manager offers the ability to see the status of your entire wireless network in one place, while also getting visibility into Spectrum, Wireless Intrusion, and other key wireless health statistics.
\r\nTable 1 TOE Models
\r\n| \r\n Model \r\n | \r\n\r\n CPU \r\n | \r\n\r\n Target Deployment \r\n | \r\n
| \r\n FWM-100D \r\n | \r\n\r\n Intel Celeron J1900 (Bay Trail) \r\n | \r\n\r\n Small enterprise \r\n | \r\n
| \r\n FWM-1000D \r\n | \r\n\r\n Intel Core i7-4790S (Haswell) \r\n | \r\n\r\n Large enterprise \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Fortinet FortiWLM Wireless Manager 8.5 was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5. The product, when configured as identified in the Fortinet FortiWLM Wireless Manager 8.5 FIPS 140-2 and Common Criteria Technote, satisfies all of the security functional requirements stated in the Fortinet FortiWLM Wireless Manager 8.5 Security Target, v2.9. The project underwent CCEVS Validator review. The evaluation was completed in November 2021.Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"The TOE provides the following security functions:
\r\na) Security Audit. The TOE generates logs of security relevant events. The TOE stores logs locally and is capable of sending log events to a remote audit server.
\r\nb) Cryptographic Support. The TOE implements cryptographic libraries and protocols in support of its functions. Relevant Cryptographic Algorithm Validation Program (CAVP) certificates are shown in Table 2.
\r\nc) Identification and Authentication. The TOE implements authentication mechanisms, authentication failure handling, password management and X.509 certificate validation services.
\r\nd) Security Management. The TOE restricts the ability to manage its functions to Security Administrators.
\r\ne) Protection of the TSF. The TOE protects cryptographic keys and administrator passwords, performs a suite of self-tests and ensures the authenticity and integrity of software updates through digital signatures.
\r\nf) TOE Access. The TOE implements session locking, session termination and displays access banners.
\r\ng) Trusted path/channels. The TOE protects the integrity and confidentiality of communications as noted in the Security Target.
\r\n\r\n| \r\n SFR \r\n | \r\n\r\n Capability \r\n | \r\n\r\n Key Size / Curve / Mod \r\n | \r\n\r\n Cryptographic Library \r\n | \r\n\r\n Certificate \r\n | \r\n
| \r\n FCS_CKM.1 \r\n | \r\n\r\n RSA KeyGen (186-4) \r\n | \r\n\r\n 2048 \r\n | \r\n\r\n \r\n \r\n \r\n Fortinet FortiWLM SSL Cryptographic Library \r\n\r\n \r\n \r\n \r\n \r\n \r\n Fortinet FortiWLM SSL Cryptographic Library \r\n | \r\n\r\n \r\n C1653 \r\n | \r\n
| \r\n ECDSA KeyGen (186-4) \r\n | \r\n\r\n P-256 \r\n | \r\n|||
| \r\n FFC KeyGen \r\n | \r\n\r\n (DH Group 14) \r\n | \r\n\r\n n/a \r\n | \r\n||
| \r\n FCS_CKM.2 \r\n | \r\n\r\n RSA | \r\n\r\n n/a \r\n | \r\n\r\n n/a \r\n\r\n | \r\n|
| \r\n KAS-ECC Component \r\n | \r\n\r\n P-256 \r\n | \r\n\r\n C1653 \r\n | \r\n||
| \r\n FFC Schemes \r\n | \r\n\r\n (DH Group 14) \r\n | \r\n\r\n n/a \r\n | \r\n||
| \r\n FCS_COP.1 | \r\n\r\n AES-CBC \r\n | \r\n\r\n 128, 256 \r\n | \r\n\r\n \r\n \r\n \r\n \r\n \r\n C1653 \r\n | \r\n|
| \r\n FCS_COP.1 | \r\n\r\n RSA SigGen (186-4) \r\nRSA SigVer | \r\n\r\n 2048 \r\n | \r\n||
| \r\n FCS_COP.1 | \r\n\r\n SHA-1 | \r\n\r\n 160, 256, 384, 512 \r\n | \r\n||
| \r\n FCS_COP.1 | \r\n\r\n HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512 \r\n | \r\n\r\n 160, 256, 384, 512 \r\n | \r\n||
| \r\n FCS_RBG_EXT.1 \r\n | \r\n\r\n CTR_DRBG (AES) \r\n | \r\n\r\n - \r\n | \r\n\r\n Fortinet FortiWLM RBG Cryptographic Library \r\n | \r\n\r\n C1652 \r\n | \r\n