19.06.2014 Views

EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ...

EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ...

EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

CCS Certification Report<br />

<strong>Blue</strong> <strong>Coat</strong> Systems, Inc.<br />

<strong>ProxySG</strong> 6.1<br />

12 Results <strong>of</strong> the <strong>Evaluation</strong><br />

This evaluation has provided the basis for an <strong>EAL</strong> <strong>4+</strong> level <strong>of</strong> assurance. The overall verdict<br />

for the evaluation is PASS. These results are supported by evidence in the ETR.<br />

13 Evaluator Comments, Observations and Recommendations<br />

The evaluator noted throughout the testing and vulnerability assessment portion <strong>of</strong> the<br />

evaluation that there are numerous configuration options available on the <strong>ProxySG</strong> 6.1. As<br />

such the evaluator strongly recommends pr<strong>of</strong>essional training for <strong>ProxySG</strong> 6.1 administrators<br />

from a qualified training facility. It is recommended that ongoing administration activities<br />

involve periodic reviews <strong>of</strong> the <strong>Blue</strong> <strong>Coat</strong> Knowledge Base (KB) as well as the Security<br />

Advisories.<br />

14 Acronyms, Abbreviations and Initializations<br />

Acronym/Abbreviation/<br />

Initialization<br />

CAC<br />

CCEF<br />

CCS<br />

CPL<br />

CM<br />

<strong>EAL</strong><br />

ETR<br />

IT<br />

ITSET<br />

JMC<br />

KB<br />

PALCAN<br />

SFP<br />

SFR<br />

ST<br />

TOE<br />

TSF<br />

URL<br />

WAN<br />

XSS<br />

Description<br />

Common Access Card<br />

Common Criteria <strong>Evaluation</strong> Facility<br />

Canadian Common Criteria <strong>Evaluation</strong> and<br />

Certification Scheme<br />

Certified Products list<br />

Configuration Management<br />

<strong>Evaluation</strong> Assurance Level<br />

<strong>Evaluation</strong> Technical Report<br />

Information Technology<br />

Information Technology Security <strong>Evaluation</strong><br />

and Testing<br />

Java Management Console<br />

Knowledge Base<br />

Program for the Accreditation <strong>of</strong> Laboratories<br />

- Canada<br />

Security Functional Policy<br />

Security Functional Requirement<br />

Security Target<br />

Target <strong>of</strong> <strong>Evaluation</strong><br />

TOE Security Function<br />

Uniform Resource Locator<br />

Wide Area Network<br />

Cross-Site Scripting<br />

___________________________________________________________________________<br />

Version 1.0 6 March 2012<br />

- Page 10 <strong>of</strong> 11 -

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!