Specifications
Cisco ISR-800 Security Target
30
5 SECURITY REQUIREMENTS
This section identifies the Security Functional Requirements for the TOE. The Security
Functional Requirements included in this section are derived from Part 2 of the Common Criteria
for Information Technology Security Evaluation, Version 3.1, Revision 4, dated: September 2012
and all international interpretations.
5.1 Conventions
The CC defines operations on Security Functional Requirements: assignments, selections,
assignments within selections and refinements. This document uses the following font
conventions to identify the operations defined by the CC:
• Assignment: Indicated with italicized text;
• Refinement: Indicated with bold text;
• Selection: Indicated with underlined text;
• Iteration: Indicated by appending the iteration number in parenthesis, e.g., (1), (2), (3).
• Where operations were completed in the NDPP, NDPP Errata#2 and VPNGWEP itself,
the formatting used in those documents has been retained.
Explicitly stated SFRs are identified by having a label ‘EXT’ after the requirement name for
TOE SFRs. Formatting conventions outside of operations matches the formatting specified
within the NDPP.
The following conventions were used to resolve conflicting SFRs between the NDPP, NDPP
Errata#2 and VPNGWEP:
• All SFRs from VPNGWEP reproduced as-is
• SFRs that appear in both NDPP and VPNGWEP are modified based on instructions
specified in VPNGWEP
• NDPP SFRs with Errata modifications are defined based on instructions specified in the
Errata
• NDPP SFRs with no Errata modifications are defined based on instructions specified in
the NDPP
5.2 TOE Security Functional Requirements
This section identifies the Security Functional Requirements for the TOE. The TOE Security
Functional Requirements that appear in the following table are described in more detail in the
following subsections.
Table 14 Security Functional Requirements
Class Name
Component
Identification
Component Name
FAU: Security audit
FAU_GEN.1
Audit data generation
FAU_GEN.2
User Identity Association
FAU_STG_EXT.1
External Audit Trail Storage