Appendix C Guidance Documentation Supplement for Common Criteria
- Aliaksei Shautsou (Deactivated)
- Shwetha S
- Arkadi_Bourkov
- Poojary Dimple
Common Criteria provides an independent and objective evaluation of the security of Information Technology (IT) products. It gives assurance that the product satisfies a set of internationally recognized security standards.
This document provides additional guidance on the secure installation of the Target of Evaluation (TOE) for Common Criteria Evaluation Assurance Level (EAL) 2 Augmented ALC_FLR.2. For more information about the Common Criteria mode, refer to the following:
https://www.commoncriteriaportal.org/
https://www.commoncriteriaportal.org/files/epfiles/ISCB-5-RPT-C089-CR-v1.pdf
https://www.commoncriteriaportal.org/files/epfiles/ISCB-3-FRM-M008-AMR-v1a.pdf
The TOE includes the following Infoblox appliances: IB-825, IB-1425, IB-2225, IB-4015, IB-4025, IB-V825, IB-V1425, IB-V2225, IB-V4015, and IB-V4025 with NIOS version 8.2.6, which are network appliances that provide delivery of IP network services and management, Grid and HA configuration. The TOE is a network device that consolidates the delivery and management of core IP network services including DNS, DHCP, IPAM, FTP, TFTP and HTTP. These appliances can be made compliant with Common Criteria and FIPS 140-2 security standards. When you enable the Common Criteria mode, only the respective mode is enabled in the device. If you enable FIPS mode on the device, it enables both Common Criteria and FIPS modes. For more information about FIPS mode, see Guidance Documentation Supplement for Federal Information Processing Standard.
To ensure that your appliance is Common Criteria compliant, make sure that your hardware and software settings match the evaluated configuration that was certified for Common Criteria.
This document provides clarifications and changes to the Infoblox Administrator Guide and Infoblox CLI Guide, and should be used as the guiding document for installation of the TOE in the Common Criteria evaluated configuration.
This appendix contains the following sections: