Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
Only the copy controller (SIP) (see section 1.3.2.8) may copy image information
and job data (e.g. the telephone number of the other fax machine) from and to a
shared memory area on the FAX board.
RECEIVING FAX: The FAX board must have terminated the PSTN connection
before informing the copy controller about the fax currently received.
SENDING FAX: The copy controller must have finished the copy operation of the
fax image to the shared memory area of the FAX board before informing the FAX
board to send the fax.
If the FAX board is not installed, an information flow is not possible and needs not to be
restricted. However, it is not required that the copy controller works in this situation in a
different way.
5.2.3. SSLSec SFP (TSP_SSL)
The security function “User Data Protection -- SSL” (TSF_FDP_SSL) requires that SSL
is enabled so that Web-based management data network traffic to and from the TOE
will be encrypted using SSL This policy will be enforced on:
SUBJECTS: Web clients.
INFORMATION: All web-based management traffic to and from that destination.
OPERATIONS: HTTP commands.
5.2.4. IP Filter SFP (TSP_FILTER)
The security function “User Data Protection -- IP Filtering” (TSF_FDP_FILTER) requires
that network traffic to and from the TOE will be filtered in accordance with the rules
defined by the system administrator at the Web User Interface configuration editor for IP
Filtering. This policy will be enforced on:
SUBJECTS: External entities that send network traffic to the TOE.
INFORMATION: All IP-based traffic to and from that destination.
OPERATIONS: Pass network traffic.
5.2.5. PrivUserAccess SFP (TSP_FMT)
The security function “Security Management” (TSF_FMT) restricts management of TOE
security functions to the authorized system administrator.
5.3. Security Functional Requirements
37
Copyright 2009 Xerox Corporation, All rights reserved