Cisco IPS4345 Bedienungsanleitung PDF herunterladen (Seite 30)

Cisco Intrusion Prevention System Security Target

SFR

Auditable Event

Additional Audit Record Contents

the session locking mechanism.

FTA_SSL.4

The termination of an interactive

session.

No additional information.

FTA_TAB.1

None.

FTP_ITC.1

Initiation of the trusted channel.

Termination of the trusted channel.

Failure of the trusted channel functions.

Identification of the initiator and target of failed

trusted channels establishment attempt.

FTP_TRP.1

Initiation of the trusted channel.

Termination of the trusted channel.

Failures of the trusted path functions.

Identification of the claimed user identity.

5.2.1.2 FAU_GEN.2 User Identity Association

FAU_GEN.2.1 For audit events resulting from actions of identified users, the TSF shall be able

to associate each auditable event with the identity of the user that caused the event.

5.2.1.3 FAU_STG_EXT.1 External Audit Trail Storage

FAU_STG_EXT.1.1 The TSF shall be able to transmit the generated audit data to an external IT

entity using a trusted channel implementing the TLS/HTTPS protocol.

5.2.2 Cryptographic Support (FCS)

5.2.2.1 FCS_CKM.1 Cryptographic Key Generation (for asymmetric keys)

FCS_CKM.1.1 Refinement: The TSF shall generate asymmetric cryptographic keys used for

key establishment in accordance with:

 NIST Special Publication 800-56A, “Recommendation for Pair-Wise Key Establishment

Schemes Using Discrete Logarithm Cryptography” for elliptic curve-based key

establishment schemes and implementing “NIST curves” P-256, P-384 and [no other

curves] (as defined in FIPS PUB 186-3, “Digital Signature Standard”)

 NIST Special Publication 800-56B, “Recommendation for Pair-Wise Key Establishment

Schemes Using Integer Factorization Cryptography” for RSA-based key establishment

schemes

and specified cryptographic key sizes equivalent to, or greater than, a symmetric key strength of

112 bits.

5.2.2.2 FCS_CKM_EXT.4 Cryptographic Key Zeroization

FCS_CKM_EXT.4.1 The TSF shall zeroize all plaintext secret and private cryptographic keys

and CSPs when no longer required.

1 2 ... 25 26 27 28 29 30 31 32 33 34 35 ... 60 61

Kommentare zu diesen Handbüchern

Keine Kommentare

Cisco IPS4345 Bedienungsanleitung Seite 30

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung Cisco IPS4345