Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
User image files associated with the Copy/Print, Store and Reprint feature
may be stored long term for later reprinting. When a job is selected for
reprint, the stored job is resubmitted to the system. Temporary files
created during processing are overwritten at the completion of the job
using the 5200.28-M algorithm. The stored jobs are not overwritten until
the jobs are deleted by the user, or when the System Administrator
executes a full on-demand image overwrite.
Xerox’s optional Network Scanning Accessory may be purchased and
added to the TOE configuration. This accessory allows documents to be
scanned at the device with the resulting image being stored on a remote
server/repository. The connection between the device and the remote
server is secured when the TOE’s SSL support is enabled; the transfer of
the data is through an HTTPS connection. The TOE supports network
scanning using FTP, HTTPS (SSL), SMTP over IPv4 and IPv6 with
support for utilizing LDAP over IPv4 and IPv6. The cryptography used to
protect this connection has been scoped out of the evaluation.
All models of the TOE support both auditing and network security. The
system administrator can enable and configure the network security
support. The network security support is based on SSL. When SSL
support is enabled on the device, the following network security features
can be enabled/configured: HTTPS support over both IPv4 and IPv6 (for
both the device’s Web UI and secure network scan data transfer); system
administrator download of the device’s audit log; IPSec support for IPP, lpr
and port 9100 print jobs over IPv4 or IPv6; and specification of IPv4 and
IPv6 filtering rules. Scan-to-email and FAX data are not protected from
sniffing by the IPSec or SSL support. The transmission of LanFax data
over the Ethernet connection is protected by IPSec, but the transmission
over the PSTN is not. Note that for the MFD configuration, IPSec can only
be activated if SSL has been enabled and an SSL-based certificate (either
“self-signed” or generated by an external Certificate Authority) has been
loaded into the TOE via the Web UI. Once this has occurred, SSL could
be disabled. Except for the cryptography used to protect the audit logs
(SSL v3.1), the cryptography used for network security has been scoped
out of the evaluation.
The TOE provides for user identification and authorization based on either
local or remote ACL’s as configured by the system administrator.
The TOE can integrate with an IPv4 or IPv6 network with native support
for dhcp/dhcpv6.
The TOE also supports the Common Access Card (CAC) standard for
authentication.
1.2.2. TOE Type
The TOE is a multi-function device (MFD) that provides copy, print,
document scanning and optional FAX services.
10
Copyright 2009 Xerox Corporation, All rights reserved