EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ...
EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ... EAL 4+ Evaluation of Blue Coat ProxySG SG510, SG600, SG810 ...
CCS Certification Report Blue Coat Systems, Inc. ProxySG 6.1 12 Results of the Evaluation This evaluation has provided the basis for an EAL 4+ level of assurance. The overall verdict for the evaluation is PASS. These results are supported by evidence in the ETR. 13 Evaluator Comments, Observations and Recommendations The evaluator noted throughout the testing and vulnerability assessment portion of the evaluation that there are numerous configuration options available on the ProxySG 6.1. As such the evaluator strongly recommends professional training for ProxySG 6.1 administrators from a qualified training facility. It is recommended that ongoing administration activities involve periodic reviews of the Blue Coat Knowledge Base (KB) as well as the Security Advisories. 14 Acronyms, Abbreviations and Initializations Acronym/Abbreviation/ Initialization CAC CCEF CCS CPL CM EAL ETR IT ITSET JMC KB PALCAN SFP SFR ST TOE TSF URL WAN XSS Description Common Access Card Common Criteria Evaluation Facility Canadian Common Criteria Evaluation and Certification Scheme Certified Products list Configuration Management Evaluation Assurance Level Evaluation Technical Report Information Technology Information Technology Security Evaluation and Testing Java Management Console Knowledge Base Program for the Accreditation of Laboratories - Canada Security Functional Policy Security Functional Requirement Security Target Target of Evaluation TOE Security Function Uniform Resource Locator Wide Area Network Cross-Site Scripting ___________________________________________________________________________ Version 1.0 6 March 2012 - Page 10 of 11 -
CCS Certification Report Blue Coat Systems, Inc. ProxySG 6.1 15 References This section lists all documentation used as source material for this report: a. CCS Publication #4, Technical Oversight, Version 1.8, October 2010. b. Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 3, July 2009. c. Common Methodology for Information Technology Security Evaluation, CEM, Version 3.1 Revision 3, July 2009. d. Blue Coat Systems, Inc. ProxySG SG510, SG600, SG810, SG900, and SG9000 running SGOS v6.1 Security Target, v1.3, 15 February 2012. e. Blue Coat Systems, Inc. ProxySG SG510, SG600, SG810, SG900, and SG9000 running SGOS v6.1 Common Criteria EAL4+ ETR, Version 0.6, February 16 2012. ___________________________________________________________________________ Version 1.0 6 March 2012 - Page 11 of 11 -
- Page 1 and 2: Certification Report EAL 4+ Evaluat
- Page 3 and 4: CCS Certification Report Blue Coat
- Page 5 and 6: CCS Certification Report Blue Coat
- Page 7 and 8: CCS Certification Report Blue Coat
- Page 9 and 10: CCS Certification Report Blue Coat
- Page 11 and 12: CCS Certification Report Blue Coat
- Page 13: CCS Certification Report Blue Coat
CCS Certification Report<br />
<strong>Blue</strong> <strong>Coat</strong> Systems, Inc.<br />
<strong>ProxySG</strong> 6.1<br />
15 References<br />
This section lists all documentation used as source material for this report:<br />
a. CCS Publication #4, Technical Oversight, Version 1.8, October 2010.<br />
b. Common Criteria for Information Technology Security <strong>Evaluation</strong>, Version 3.1<br />
Revision 3, July 2009.<br />
c. Common Methodology for Information Technology Security <strong>Evaluation</strong>, CEM,<br />
Version 3.1 Revision 3, July 2009.<br />
d. <strong>Blue</strong> <strong>Coat</strong> Systems, Inc. <strong>ProxySG</strong> <strong>SG510</strong>, <strong>SG600</strong>, <strong>SG810</strong>, SG900, and SG9000<br />
running SGOS v6.1 Security Target, v1.3, 15 February 2012.<br />
e. <strong>Blue</strong> <strong>Coat</strong> Systems, Inc. <strong>ProxySG</strong> <strong>SG510</strong>, <strong>SG600</strong>, <strong>SG810</strong>, SG900, and SG9000<br />
running SGOS v6.1 Common Criteria <strong>EAL</strong><strong>4+</strong> ETR, Version 0.6, February 16 2012.<br />
___________________________________________________________________________<br />
Version 1.0 6 March 2012<br />
- Page 11 <strong>of</strong> 11 -
Change language