
Aruba Networks Security Target
Page 16 of 67
4 Security Objectives
4.1 Objectives for the Operational Environment
29 Table 7 identifies the objectives for the operational environment.
Table 7: Operational environment objectives drawn from NDPP
There are no general-purpose computing capabilities (e.g.,
compilers or user applications) available on the TOE, other
than those services necessary for the operation,
administration and support of the TOE.
Physical security, commensurate with the value of the TOE
and the data it contains, is provided by the environment.
TOE Administrators are trusted to follow and apply all
administrator guidance in a trusted manner.
4.2 Objectives for the TOE
30 Table 8 identifies the security objectives for the TOE.
Table 8: Objectives drawn from NDPP
O.PROTECTED
_COMMUNICATIONS
The TOE will provide protected communication channels for
administrators, other parts of a distributed TOE, and
authorized IT entities.
The TOE will provide the capability to help ensure that any
updates to the TOE can be verified by the administrator to be
unaltered and (optionally) from a trusted source.
The TOE will provide the capability to generate audit data and
send those data to an external IT entity.
The TOE will display an advisory warning regarding use of the
TOE.
The TOE will provide mechanisms to ensure that only
administrators are able to log in and configure the TOE, and
provide protections for logged-in administrators.
O.RESIDUAL_INFORMATION
_CLEARING
The TOE will ensure that any data contained in a protected
resource is not available when the resource is reallocated.
Comentários a estes Manuais