The TOE is the Progress Software Corporation’s Progress LoadMaster X25-NG, LoadMaster X40-NG, ECS CM H2 NG, ECS CM H3 NG and Virtual LoadMaster running on LoadMaster OS 7.2.54.18. The LoadMaster simplifies the management of networked resources, and optimizes and accelerates user access to diverse servers, content, and transaction-based systems. The TOE is comprised of hardware and software and represents a complete network device providing load balancing functionality.
","evaluation_configuration":"The following environmental components are required to operate the TOE in the evaluated configuration:
\r\n","security_evaluation_summary":"
The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) process and scheme. The criteria against which the Progress LoadMaster of Evaluation (TOE) was evaluated is described in the Common Criteria for Information Technology Security Evaluation, Version 3.1 rev 5. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 rev 5. The product, when delivered and configured as identified in the Common Criteria Administrator Guidance, satisfies all of the security functional requirements stated in the Progress LoadMaster Security Target. The project underwent CCEVS Validator review. The evaluation was completed in July 2026. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report prepared by CCEVS.
","environmental_strengths":"The TOE provides the security functions required by the Collaborative Protection Profile for Network Devices, hereafter referred to as NDcPP v3.0e or NDcPP.
\r\nThe TOE generates audit records for security relevant events. The audit events are associated with the administrator or processes. The audit records are transmitted over TLS to an external audit server.
\r\nThe TOE provides the following cryptographic services described below.
\r\nTable 3– Cryptographic Services
\r\n| \r\n\r\n | \r\n\r\n Use \r\n | \r\n
| \r\n TLS Client \r\n | \r\n\r\n Secure connection to remote syslog servers. \r\n | \r\n
| \r\n TLS Client \r\n | \r\n\r\n Secure connection to remote LDAP server. \r\n | \r\n
| \r\n TLS/HTTPS Server \r\n | \r\n\r\n Secures connections with remote administrators. \r\n | \r\n
| \r\n Verification of Updates \r\n | \r\n\r\n Digital signature verification prior to installing an update. \r\n | \r\n
Each of these cryptographic algorithms have been validated for conformance to the requirements specified in their respective standards, as identified below.
\r\nThe TOE supports a password-based authentication mechanism which automatically locks users after a pre-configured number of failed attempts. The TOE also validates X.509 certificates in support of TLS.
\r\nThe TOE provides management capabilities via Console and a Web-based GUI, accessed over HTTPS. Management functions allow the administrators to configure the system, install updates, and manage users.
\r\nThe TOE prevents the reading of plaintext passwords and keys. The TOE provides a reliable timestamp for its own use. The reliable timestamp can be set by a security administrator or authenticated NTP. To protect the integrity of its security functions, the TOE implements a suite of self-tests at startup and halts or disables affected functionality if a self-test fails. The TOE ensures that updates to the TOE are authenticated by verifying a digital signature prior to installing any update.
\r\nThe TOE monitors local and remote administrative sessions for inactivity and either locks or terminates the session when a threshold time period is reached. An advisory notice is displayed at the start of each session.
\r\nThe TOE initiates a TLS trusted channel with a syslog server and LDAP authentication server (as configured).
\r\nThe TOE is a TLS/HTTPS server that allows remote administrators to establish a trusted path with the TOE.
","features":[{"id":5571,"feature_name":"Auditing"},{"id":5572,"feature_name":"Cryptograhic Key Generation"},{"id":5576,"feature_name":"Cryptographic Hashing"},{"id":5573,"feature_name":"Cryptographic Key Establishment"},{"id":5574,"feature_name":"Cryptographic Signature Generation"},{"id":5575,"feature_name":"Cryptographic Signature Verification"},{"id":5577,"feature_name":"Network Device"},{"id":5578,"feature_name":"TLS 1.2"},{"id":5579,"feature_name":"TLS Client"},{"id":5580,"feature_name":"TLS Server without Mutual Authentication"}]}