Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
Objectives
O.PROTECT_COM
O.PROTECT_DAT
Description
The TOE must protect management data from disclosure,
or modification, by establishing a trusted channel between
the TOE and another trusted IT product over which the
management data is transported.
The TOE must protect from disclosure or modification: user
data temporarily stored for the purpose of reprinting in the
future, temporary spool files created from print, fax and
scan jobs, and swap files.
4.2. Security Objectives for the
Operational Environment
Table 9: Security Objectives for the IT Environment
Objectives
OE. NETWORK
OE.NETWORK_I&A
OE.PROTECT_CO
M
Description
The network that the TOE is connected to will be monitored
for unapproved activities and/or attempts to attack network
resources (including the TOE). This includes a high number
of logon tries to the web interface of the TOE.
The TOE environment shall provide, per site specific policy,
the correct and accurately functioning Identification and
Authentication, and NTP mechanism(s) that are compatible
with, and for external use by, the TOE. These mechanisms
will be under the same management and physical control as
the TOE and are covered by the same management and
security policy as the TOE. These I&A assets may also
maintain authorization information (access and/or
permissions lists) for users who are authenticated by the
environment.
The TOE environment (product) and remote trusted IT
products (which support the external half of all RFCcompliant
communications and protocols) must protect user
print jobs and scan-to-mailbox job data from disclosure, or
modification. The TOE environment and remote trusted IT
products must also prevent management data from being
disclosed.
28
Copyright 2009 Xerox Corporation, All rights reserved