Installation guide

Motorola WS5100 Wireless Switch and RFS7000 RF Switch Security Target
Page 17 of 85
OE.AUDIT_PROTECTION The IT Environment will provide the capability to protect audit
information and the authentication credentials.
OE.AUDIT_REVIEW The IT Environment will provide the capability to selectively view
audit information.
OE.MANAGE The TOE IT environment will augment the TOE functions and
facilities necessary to support the administrators in their
management of the security of the TOE, and restrict these
functions and facilities from unauthorized use.
OE.NO_EVIL Sites using the TOE shall ensure that administrators are non-
hostile, appropriately trained and follow all administrator
guidance.
OE.NO_GENERAL_PURPOSE
There are no general-purpose computing or storage repository
capabilities (e.g., compilers, editors, or user applications)
available on the TOE.
OE.PHYSICAL The environment provides physical security commensurate with
the value of the TOE and the data it contains.
OE.PROTECT_MGMT_COMMS
The environment shall protect the transport of audit records to
the audit server, remote network management, and
authentication server communications with the TOE and time
service in a manner that is commensurate with the risks posed
to the network.
OE.RESIDUAL_INFORMATION
The TOE IT environment will ensure that any information
contained in a protected resource within its Scope of Control is
not released when the resource is reallocated.
OE.SELF_PROTECTION The environment will maintain a domain for its own execution
that protects itself and its resources from external interference,
tampering, or unauthorized disclosure through its own interfaces.
OE.TIME_STAMPS The TOE IT environment shall provide reliable time stamps and
the capability for the administrator to set the time used for these
time stamps.
OE.TOE_ACCESS The environment will provide mechanisms that support the TOE
in providing a user’s logical access to the TOE.
OE.TOE_NO_BYPASS Wireless clients are configured so that information cannot flow
between a wireless client and any other wireless client or host
networked to the TOE without passing through the TOE.