Hardware manual

Version 1.1, 03/31/2015
GSS CCT Evaluation Technical Report Page 8 of 56 © 2015 Gossamer Security Solutions, Inc.
Document: AAR-BrocadeNetIron5.8 All rights reserved.
Requirement
Auditable Events
Additional
Audit Record
Contents
Guidance Location
Session.
Establishment/Termination
of a TLS session.
1
failure.
Non-TOE
endpoint of
connection (IP
address) for
both successes
and failures.
Informational Message
Security telnet | SSH | web access [by
username] from src IP source ip address,
src MAC source MAC address rejected, n
attempts..
Security telnet | SSH | web access [by
username] from src IP source ip address,
FIPS Guide, Annex C
SSL Syslog server ip-address:portnum is now
connected.
FIA_UIA_EXT.1
All use of the identification
and authentication
mechanism.
Provided user
identity, origin
of the attempt
(e.g., IP
address).
Administration Guide, Appendix A
Informational Message
Console:
Success
Security: console login by username to USER
| PRIVILEGE EXEC mode
The specified user logged into the device
console into the specified EXEC mode.
Security console logout {by <user>I<null>}
from USER EXEC mode
SSH:
Success
Security {telnet I ssh} login {by userInull}
from src {IP ip I IPv6 ipv6-addr} to
Privileged EXEC mode
Failure
telnet | SSH | web access [by username]
from src IP source ip address, src MAC
source MAC address rejected, n attempts
access attempts from the specified source
IP and MAC address.
• [by user username] does not appear if
telnet or SSH clients are specified.
• n is the number of times this SNMP
trap occurred in the last five minutes,
or other configured number of
minutes.
HTTPS/TLS:
Success
Security telnet | SSH | web access [by