The TOE is Alcatel-Lucent Enterprise OmniSwitch family of network switches. All the switches in the OmniSwitch family use the same secure level code, support Deep Packet Inspection (DPI) and Shortest Path Bridging (SPB), and provide wire-rate switching and routing capacity.
\r\nThe TOE includes hardware and software components listed in table below.
\r\nThe software running all the platforms below is Alcatel-Lucent Operating System (AOS), which is the single purpose operating system supporting device management and network management.
","evaluation_configuration":"The evaluation covers the following hardware platforms:
\r\n| \r\n Model \r\n | \r\n\r\n Switch Processor \r\n | \r\n\r\n Application Processor Series \r\n | \r\n\r\n Software Image \r\n | \r\n\r\n Network Interface \r\n | \r\n
| \r\n OmniSwitch 6360 \r\n | \r\n\r\n Marvell 98DX236S \r\n | \r\n\r\n Arm ARMv7-A Cortex-A \r\n\r\n | \r\n\r\n Nosa.img \r\n | \r\n\r\n Marvell AlleyCat 3 \r\n\r\n | \r\n
| \r\n Marvell 98DX233S \r\n | \r\n||||
| \r\n OmniSwitch 6465 \r\n | \r\n\r\n Marvell 98DX3233 \r\n | \r\n\r\n Arm ARMv7-A Cortex-A \r\n | \r\n\r\n Nos.img \r\n | \r\n\r\n Marvell AlleyCat 3 \r\n | \r\n
| \r\n OmniSwitch 6465T \r\n | \r\n\r\n Marvell 98DX3233 \r\n | \r\n\r\n Arm ARMv7-A Cortex-A \r\n | \r\n\r\n Nos.img \r\n | \r\n\r\n Marvell AlleyCat 3 \r\n | \r\n
| \r\n OmniSwitch 6560 \r\n | \r\n\r\n Marvell 88F6820 \r\n | \r\n\r\n Arm ARMv7-A Cortex-A \r\n | \r\n\r\n Nos.img \r\n | \r\n\r\n Marvell AlleyCat 3 \r\n | \r\n
| \r\n OmniSwitch 6570 \r\n | \r\n\r\n Marvell 98DX3501 \r\n | \r\n\r\n Arm ARMv8.2-A Cortex-A \r\n\r\n | \r\n\r\n Wos.img \r\n | \r\n\r\n Marvell AlleyCat 5 \r\n\r\n | \r\n
| \r\n Marvell 98DX3510 \r\n | \r\n||||
| \r\n OmniSwitch 6860N \r\n | \r\n\r\n Intel Atom C3338 \r\n | \r\n\r\n Intel Goldmont Atom \r\n | \r\n\r\n Uosn.img \r\n | \r\n\r\n Broadcom Trident3 \r\n | \r\n
| \r\n Intel Atom C3558 \r\n | \r\n||||
| \r\n OmniSwitch 6865 \r\n | \r\n\r\n Broadcom BCM56342 \r\n | \r\n\r\n Arm ARMv7-A Cortex-A \r\n | \r\n\r\n Uos.img \r\n | \r\n\r\n Broadcom Helix4 \r\n | \r\n
| \r\n OmniSwitch 6870 \r\n | \r\n\r\n Intel Atom C3338 \r\n | \r\n\r\n Intel Goldmont Atom \r\n | \r\n\r\n Kos.img \r\n | \r\n\r\n Marvell Prestera DX \r\n | \r\n
| \r\n Intel Atom C3558 \r\n | \r\n||||
| \r\n OmniSwitch 6900 \r\n | \r\n\r\n Intel Atom C3558 \r\n | \r\n\r\n Intel Goldmont Atom \r\n | \r\n\r\n Yos.img \r\n | \r\n\r\n Broadcom Trident3 \r\n | \r\n
| \r\n Intel Xeon D1518 \r\n | \r\n\r\n Intel Broadwell Xeon \r\n | \r\n|||
| \r\n OmniSwitch 9900 \r\n | \r\n\r\n Intel Atom C2518 \r\n | \r\n\r\n Intel Silvermont Atom \r\n | \r\n\r\n Mos.img \r\n | \r\n\r\n Marvell Prestera DX \r\n | \r\n
| \r\n Intel Atom C3558 \r\n | \r\n\r\n Intel Goldmont Atom \r\n | \r\n
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process. The criteria against which the Alcatel-Lucent Enterprise OmniSwitch series 6360, 6465, 6465T, 6560, 6570, 6860N, 6865, 6870, 6900, 9900 with AOS 8.10 TOE was evaluated are described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 5. The evaluation methodology used by the evaluation team to conduct the evaluation was the Common Methodology for Information Technology Security Evaluation, Version 3.1, Revision 5 supplemented by that found in the Protection Profiles cited below. The evaluation was completed in February 2026. The product, when delivered and configured as identified in the Alcatel-Lucent Enterprise Preparation and Operation of Common Criteria Evaluated OmniSwitch Products (NDcPP) AOS Release 8.10 document, meets the requirements of the following:
\r\nThe TOE generates audit records for security-related events. The audit records contain time stamps and other information about the events, which are helpful to the administrator in investigating the issues related to the configuration and operation of the TOE.
\r\nThe TOE writes audit records to a set of circular log files stored in the flash memory for permanent storage. The TOE can be configured to transfer the audit data to an external syslog server in real-time using the TLS protocol.
\r\nThe TOE implements the cryptography supporting the following functionalities:
\r\nThe TOE provides cryptographic support using the OpenSSL library version 3.0.13, which is bundled in the TOE. The TOE also includes a software-based, SP800-90B compliant Entropy Source seeding DRBGs with full entropy.
\r\nAdministrators can access the TOE through either the local console port or a remote SSH client. The TOE authenticates administrators before granting access to management functions. For local administrative sessions, authentication is performed using passwords. For remote sessions, administrators are authenticated via SSH passwords or SSH public keys. The TOE also supports validation of X.509 certificates for authenticating external IT entities.
\r\nThe TOE provides a Command-Line Interface (CLI) to the administrators for managing the configurable aspects of the TOE. The TOE provides a range of management functions, which are restricted to administrators with the appropriate privileges.
\r\nProtection of the TSF
\r\nThe TOE includes protective features to maintain the integrity and reliability of its security functions.
\r\nTOE Access
\r\nThe TOE can be configured to display a login banner when an administrator establishes an interactive session (both local and remote). The TOE terminates interactive sessions after an administrator-defined period of inactivity. The TOE allows administrators to terminate their own administrative sessions.
\r\nTOE Trusted Path/Channel
\r\nThe TOE includes the OpenSSL library version 3.0.13 and OpenSSH package version 9.8. The TOE implements the TLS protocol version 1.2 (TLS v1.2) and the SSH protocol version 2 (SSHv2) using OpenSSL and OpenSSH, respectively.
\r\n