System information

Cisco Cat3K ST 6 June 2012

not interfere with the enforcement of the security policies as defined in the

Security Target.

• TrustSec - is only relevant to this ST to a limited degree, for RADIUS KeyWrap,

which is being represented with other cryptographic methods. This feature is

disabled by default and should remain disabled in the evaluated configuration.

Not including this feature does not interfere with the enforcement of the security

policies as defined in the Security Target.

• VLAN Trunking, 802.1Q tunneling, VLAN mapping, dynamic VLAN

membership. These features are disabled by default and should remain disabled

in the evaluated configuration. Not including these features do not interfere with

the enforcement of the security policies as defined in the Security Target.

• Security Group Tags are a 16-bit single label indicating the security classification

of a source in the TrustSec domain and it is appended to an Ethernet frame or an

IP packet. This feature is disabled by default and should remain disabled in the

evaluated configuration. Not including this feature does not interfere with the

enforcement of the security policies as defined in the Security Target.

• Smart Install is a feature to configure IOS Software and switch configuration

without user intervention. The Smart Install uses dynamic IP address allocation

to facilitate installation providing transparent network plug and play. This

feature is not to be used as it could result in settings/configurations that would as

it may interfere with the enforcement of the security policies as defined in the

Security Target.

Apart from these exceptions all types of network traffic through and to the TOE are

within the scope of the evaluation.

1.9 TOE Documentation

This section identifies the guidance documentation included in the TOE. The

documentation for the Cisco Catalyst Switches (3560-X and 3750-X) comprises:

• Installation and Configuration for Common Criteria EAL2 Evaluated Cisco IOS

Catalyst Switches (3560-X and 3750-X)

• Administrative Guidance for Cisco Catalyst Switches (3560-X and 3750-X)

• Cisco IOS Security Command Reference

• Cisco IOS Security Configuration Guide