
Chapter 13
Common Criteria EAL2 Compliance
This chapter includes the following topics:
■ Common Criteria EAL2 Compliance on page 63
Common Criteria EAL2 Compliance
Table 21 on page 63Table 21 on page 63 provides guidelines you must observe to
deploy and use the IDP appliance in compliance with the Common Criteria EAL2. In
addition, you must observe compliance guidelines for Network and Security Manager
(NSM), listed in the Network and Security Manager Administration Guide.
Table 21: Common Criteria EAL2 Compliance
GuidelinesCategory
■
The IDP appliance must be connected to the network from which IT systems
are to be monitored to collect data or to prevent certain data from passing
to or from IT systems.
■
The IDP appliance must be appropriately scalable to the IT system that it
monitors.
■
The IDP appliance must be managed in a manner that allows it to address
changes in the IT system that it monitors.
■
The IDP appliance, the NSM device server and GUI server, and the NSM UI
must be installed on dedicated systems. These dedicated systems must
not contain user processes that are not required to operate the IDP system.
Intended
Usage
■
There must be one or more authorized individuals assigned to manage the
IDP appliance, NSM, and the security of the information that they contain.
■
The authorized administrators must not be careless, willfully negligent, or
hostile and must follow and abide by the instructions provided by the IDP
appliance, NSM, and UI documentation.
■
The IDP appliance and NSM must be accessed only by authorized users.
Personnel
The processing resources of the IDP appliance, the NSM server, and the NSM
UI must be located within facilities with controlled access that prevents
unauthorized physical access.
Physical
Protection
Related Topics ■ Standards Compliance on page 61
Common Criteria EAL2 Compliance ■ 63
Komentarze do niniejszej Instrukcji