Specifications

Cisco ISR-800 Security Target

Class Name

Component

Identification

Component Name

FPT_SKP_EXT.1

Extended: Protection of TSF Data (for reading of all

symmetric keys)

FPT_APW_EXT.1

Extended: Protection of Administrator Passwords

FPT_STM.1

Reliable Time Stamps

FPT_TST_EXT.1

Extended: TSF Testing

FPT_TUD_EXT.1

Extended: Trusted Update

FTA: TOE Access

FTA_SSL_EXT.1

TSF-initiated Session Locking

FTA_SSL.3

TSF-initiated Termination

FTA_SSL.4

User-initiated Termination

FTA_TAB.1

Default TOE Access Banners

FTP: Trusted Path/Channels

FTP_ITC.1

Inter-TSF trusted channel

FTP_TRP.1

Trusted Path

5.3 SFRs from NDPP and VPN Gateway EP

5.3.1 Security audit (FAU)

5.3.1.1 FAU_GEN.1 Audit data generation

FAU_GEN.1.1 The TSF shall be able to generate an audit record of the following auditable

events:

a) Start-up and shut-down of the audit functions;

b) All auditable events for the not specified level of audit; and

c) All administrative actions;

d) [Specifically defined auditable events listed in Table 15].

FAU_GEN.1.2 The TSF shall record within each audit record at least the following information:

a) Date and time of the event, type of event, subject identity, and the outcome (success or

failure) of the event; and

b) For each audit event type, based on the auditable event definitions of the functional

components included in the PP/ST, [information specified in column three of Table 15].