{"product_id":2015,"v_id":2015,"product_name":"Foundry Networks, Management Module IV: J-BxGMR4 and J-FxGMR4","certification_status":"Not Certified","certification_date":"2004-01-30T00:01:00Z","tech_type":"Network Switch, Router","vendor_id":{"name":"Foundry Networks, Inc.","website":"http://www.foundrynet.com"},"vendor_poc":"Stephanie Argilan","vendor_phone":"410.721.4358","vendor_email":"sargilan@foundrynet.com","assigned_lab":{"cctl_name":"DXC.technology"},"product_description":"<p>The TOE, the Foundry Networks, Management Module IV: J-BxGMR4 and J-FxGMR4, is a hardware component that slides into a slot within the chassis of a Foundry BigIron or FastIron router or switch. The TOE's operating system is Foundry Networks' IronWare&trade; operating system (IOS), Version 07.6.04f (which incorporates Foundry Networks' IronShield&trade; security module). The management module running the IOS Version 07.6.04f software is the TOE, and its purpose is to securely manage itself and its accessibility to the Foundry routers and switches that it is configured to interact with. The J-BxGMR4 is for use with the Foundry BigIron 4000, 8000, and 15000 series chassis, and the J-FxGMR4 is for use with the Foundry FastIron 400, 800, and 1500 series chassis. </p>\r\n<p>The IronWare&trade; operating system alone, was not the focus of this evaluation and its purpose, to control the switching and routing of layer 2 and layer 3 frames and packets through Foundry chassis-based switches and routers, was not addressed in this evaluation. The focus of this evaluation was for the IronWare&trade; operating system, Version 07.6.04f, (which incorporates Foundry Networks' IronShield&trade; security module) and its security features only.</p>","evaluation_configuration":null,"security_evaluation_summary":"<p>The evaluation was carried out in accordance with the Computer Sciences Corporation (CSC) Common Criteria Testing Laboratory processes and procedures that are compliant with the Common Criteria Evaluation and Validation Scheme (CCEVS). The evaluation demonstrated that the Foundry Networks Management Module IV models J-BxGMR4 and J-FxGMR4, met the security requirements contained in the Security Target. The criteria used against the Foundry Networks Management Module IV models J-BxGMR4 and J-FxGMR4, is described in the Common Criteria for Information Technology Security Evaluation, Version 2.1. The evaluation methodology used by the CSC evaluation team to conduct the evaluation, was the Common Methodology for Information Technology Security Evaluation, Version 1.0. </p>\r\n<p>CSC determined that the evaluation assurance level (EAL) for the Foundry Networks Management Module IV models J-BxGMR4 and J-FxGMR4 TOE was EAL 2. The TOE, configured as specified in the installation guide, satisfies all of the security functional requirements stated in the Security Target. A Validator, on behalf of the CCEVS Validation Body, monitored the evaluation carried out by CSC. The evaluation was completed in December 2003. Results of the evaluation can be found in the Common Criteria Evaluation and Validation Scheme Validation Report for the Foundry Networks Management Module IV models J-BxGMR4 and J-FxGMR4, prepared by CCEVS. </p>\r\n<p>Only the Foundry Networks Management Module IV model J-BxGMR4 and model J-FxGMR4, running the Foundry Network's Networks' IronWare&trade; operating system (IOS), Version 07.6.04f (that incorporates Foundry Networks' IronShield&trade; security module), is the evaluated EAL 2 configuration.</p>","environmental_strengths":"<p>Security features of the TOE include: </p>\r\n<ul>\r\n    <li>four types of User Data Protection (restricting management functions from remote sources, controlling port-level access, limiting user access to specific levels of the command line interface and controlling the flow of user data across the ports); </li>\r\n    <li>two types of Identification and Authentication (controlling access to the management functions of the device via usernames, passwords and privilege level assignments and, establishing hierarchical lists of acceptable authentication methods); </li>\r\n    <li>Security Management using Access Control Lists (ACLs) and security roles, definitions and privileges; </li>\r\n    <li>and Auditing based on defined ACLs. </li>\r\n</ul>\r\n<p>&nbsp;</p>","features":[]}