The Juniper Networks EX4400 series comprises high-performance Ethernet switches that support MACsec encryption and offer 1 Gigabit/10-gigabit Ethernet connectivity.
\r\nThe TOE is the Juniper Networks EX4400-24X, EX4400-24T, EX4400-24P, EX4400-24MP, EX4400-48T, EX4400-48P, EX4400-48F, EX4400-48MP platforms executing the Juno OS 24.2R2 software.
","evaluation_configuration":"| \r\n Model \r\n | \r\n\r\n Port Configuration \r\n | \r\n\r\n MACsec FPGA \r\n | \r\n\r\n CPU \r\n | \r\n\r\n Software \r\n | \r\n
| \r\n EX4400-24X \r\n | \r\n\r\n 24-Port | \r\n\r\n PHY1 \r\nBCM82756 \r\nPHY2 PHY3 \r\nBCM82398 \r\n | \r\n\r\n Intel Atom C3558R | \r\n\r\n Junos OS 24.2R2 \r\n | \r\n
| \r\n EX4400-24T \r\n | \r\n\r\n 24-port | \r\n\r\n PHY1 \r\nBCM54192 \r\nPHY2 \r\nBCM82399 \r\n | \r\n||
| \r\n EX4400-24P \r\n | \r\n\r\n 24-port | \r\n\r\n PHY1 \r\nBCM54192 \r\nPHY2 \r\nBCM82399 \r\n | \r\n||
| \r\n EX4400-24MP \r\n | \r\n\r\n 24x-port | \r\n\r\n PHY1 \r\nBCM84894M \r\nPHY2 \r\nBCM82399 \r\n | \r\n||
| \r\n EX4400-48T \r\n | \r\n\r\n 48-port | \r\n\r\n PHY1 \r\nBCM54192 \r\nPHY2 \r\nBCM82399 \r\n | \r\n||
| \r\n EX4400-48P \r\n | \r\n\r\n 48-port | \r\n\r\n PHY1 \r\nBCM54192 \r\nPHY2 \r\nBCM82399 \r\n | \r\n||
| \r\n EX4400-48F \r\n | \r\n\r\n 12-port 36-port | \r\n\r\n PHY1 \r\nBCM54195 \r\nPHY2 \r\nBCM82399 \r\nPHY3 \r\nBCM82756 \r\n | \r\n||
| \r\n EX4400-48MP \r\n | \r\n\r\n 12x100M/1/2.5/5/10GbE + \r\n36x100M/1/2.5GbE \r\n(PoE) \r\n | \r\n\r\n PHY1 \r\nBCM54998EM \r\nPHY2 \r\nBCM82399 \r\nPHY3 \r\nBCM84894M \r\n | \r\n
","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Junos OS 24.2R2 for EX4400 was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Rev. 5. The product, when configured as identified in the Juniper Networks Junos OS Common Criteria Evaluated Configuration Guide for EX4400-24MP, EX4400-24P, EX4400-24T, EX4400-24X, EX4400-48F, EX4400-48MP, EX4400-48P, and EX4400-48T Devices, Release 24.2R2, Published 2026-03-27, satisfies all of the security functional requirements stated in the Junos OS 24.2R2 for EX4400 Security Target, v1.1. The project underwent CCEVS Validator review. The evaluation was completed in May 2026. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"The TOE provides the following security functions:
\r\n• Security Audit. The TOE generates audit records of user and administrator actions. The TOE includes the user identity in audit events resulting from actions of identified users. The TOE is capable of sending logs in real-time to an external syslog server via SSHv2.
\r\n• Cryptographic Support The TOE implements a cryptographic module. The cryptographic module has the ability to generate and destroy cryptographic keys. Relevant Cryptographic Algorithm Validation Program (CAVP) certificates are shown in Table 4.
\r\n• Identification and Authentication. The TOE ensures that all users must be identified and authenticated before accessing its functions and data.
\r\n• Security Management. The TOE provides a suite of security management functions that is available to authorized administrators in support of configuring and maintaining the TOE.
\r\n• Protection of the TSF. The TOE performs a suite of self-tests to ensure the correct operation and enforcement of its security functions including software integrity verification using digital signatures. The TOE also supports the use of NTP or its own manually configurable time source to support the execution of reliable and time sensitive operations.
\r\n• TOE Access. The TOE can be accessed physically via direct serial connection or remotely via SSH connection. When a user account has reached the configured number of failed authentication attempts, the account will be locked for a Security Administrator defined time period.
\r\n• Trusted Path/Channels. The TOE protects the integrity and confidentiality of communications between itself and local/remote administrators as noted in section 2.2.2 of the Security Target.
","features":[{"id":5397,"feature_name":"MACsec"},{"id":5396,"feature_name":"Network Device"},{"id":5398,"feature_name":"SSH Server"}]}