Xerox WorkCentre 5135/5150 Multifunction ... - Common Criteria

Xerox WorkCentre 5135/5150
Multifunction Systems Security Target
O.FAXLINE
O.MANAGE
temporary document image data of abnormally terminated jobs will be
overwritten once the TOE is turned back on after a power failure.
Additionally, these two requirements ensure that the complete space
reserved for temporary document image data can be overwritten “on
demand” by the system administrator.
FMT_SMF.1 requires that there is a possibility to invoke this ODIO
function. FMT_MOF.1 specifies that the function can be enabled or
disabled by the system administrator. FMT_SMR.1 manages the role
“system administrator”.
FDP_IFC.1 (FLOW) and FDP_IFF.1 (FLOW) define the rules according
to which an information flow between network controller, copy controller
and FAX board (if installed) is allowed. By implementing a store-andforward
principle in both directions, a direct interconnection between the
PSTN and the internal network is not possible.
FAU_GEN.1 ensures that the TOE is able to generate time-stamped
audit records of a specified set of security-relevant events related to
TOE operations.
FMT_SMF.1 ensures that the security management functions (i.e.,
enable/disable IIO and ODIO, change system administrator password,
invoke/abort ODIO, enable/disable Network Authentication,
enable/disable Audit Logging, enable/disable SSL, enable/disable IP
Filtering) are available on the TOE.
FMT_MOF.1 restricts the access to these management functions to the
system administrator. FMT_SMR.1 manages the role “system
administrator”.
FIA_UAU.2 and FIA_UID.2 ensure that system administrators are
authenticated (and implicitly identified) before accessing the security
functionality of the TOE. FIA_UAU.7 ensures that only obscured
feedback generated by the authentication process is provided to system
administrators before successful authentication.
FIA_UAU.2 and FIA_UID.2 ensure that the TOE enforces authorized
users to identify and authenticate before being able to use the installed
network options of the TOE.
FIA_AFL.1 (AUT 1) ensures that the TOE takes specific and immediate
self-protection action when the set threshold of unsuccessful login
attempts by the System Administrator is reached for the Local User
Interface.
FIA_AFL.1 (AUT 2) provides an appropriate error message to the user’s
web browser when the set threshold of unsuccessful login attempts by
the System Administrator is reached for the Web User Interface.
FMT_MTD.1 (all) ensures that the TOE enforces the PrivUserAccess
62
Copyright 2009 Xerox Corporation, All rights reserved