Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
T.COMM_SEC
T.INFAX
T.OUTFAX
T.USER
T.RECOVER to an acceptable level by minimizing the
amount of time that temporary document image data
is on the hard disk drive or in fax card flash memory.
O.RECOVER requires that the residual data will be
overwritten as described in DoD 5200.28-M
immediately after the job is finished or once the TOE
is turned back on after a power failure. Copy and
Embedded FAX jobs (if installed) will not be stored on
the HDD at all.
Additionally, O.RECOVER requires that the TOE
perform the overwrite security function at any time
that the system administrator chooses to ensure that
all latent data has been removed from the HDD and
the Fax card flash memory.
O.CONTROL_ACCESS helps counter the threat
T.RECOVER because restricted access to TOE
network resources helps to prevent recovery attacks
from untrusted remote IT products.
O.PROTECT_DAT helps counter the threat
T.RECOVER because it ensures that user data
stored on the hard disk is not recoverable when the
disk is removed from the system.
O.PROTECT_COM helps mitigate the threat
T.COMM_SEC by ensuring that a fully-compliant
trusted channel between the TOE and another remote
trusted IT product exists to protect management data
from disclosure or modification by an attacker
attempting to intercept communications between the
TOE and the remote trusted IT product.
O.FAXLINE counters the threat T.INFAX because a
connection from the PSTN port of the FAX board (if
installed) to the internal network is not allowed.
O.FAXLINE counters the threat T.OUTFAX because
the users of the internal network are not allowed to
access the PSTN port of the FAX board (if installed).
So, it is not possible to establish an interconnection
between PSTN and the internal network by using the
TOE.
O.MANAGE counters the threat T.USER by ensuring
that the users who have not authenticated as the
system administrator cannot access the management
functions and cannot make configuration or
32
Copyright 2009 Xerox Corporation, All rights reserved