Common Criteria Evaluated Configuration Overview
This document describes the steps required to duplicate the configuration of the device running Junos OS when the device is evaluated. This is referred to as the evaluated configuration. The following list describes the standards to which the device has been evaluated:
Common Criteria Overview
Common Criteria for information technology is an international agreement signed by several countries that permits the evaluation of security products against a common set of standards. In the Common Criteria Recognition Arrangement (CCRA) at https://www.commoncriteriaportal.org/ccra/index.cfm, the participants agree to mutually recognize evaluations of products performed in other countries. All evaluations are performed using a common methodology for information technology security evaluation.
For more information on Common Criteria, see https://www.commoncriteriaportal.org/.
Target of Evaluation (TOE) is a device or system subjected to evaluation based on Collaborative Protection Profile (cPP).
Product Functionality Not Included in the Scope of the Evaluation
The following product functionalities are not included in the CC evaluation:
-
Use of telnet, since it violates the Trusted Path requirement set
-
Use of FTP, since it violates the Trusted Path requirement set
-
Use of SNMP, since it violates the Trusted Path requirement set
-
Use of SSL, including management via J-Web, JUNOScript and JUNOScope, since it violates the Trusted Path requirement set
-
Use of CLI account super-user and Linux root account.
Supported Platforms
For the features described in this document, the following platform are supported to qualify NDcPPv3.0e:
| Model | RE | RE CPU | MACsec Linecard | MIC-3D-10GE-SGP-E within MPC3E-3D-NG |
|---|---|---|---|---|
| MX240 |
RE-S-X6-128G RE-S-X6-64G |
Intel HASWELL-EP Xeon E5-2608L V3 |
MPC10-10C and MPC10E-15C, with JNPR Penta Silicon MACsec ASIC | BMC82756 MACsec ASIC with CAVP num AES4550 |
| MX480 | ||||
| MX960 | ||||
| EX9204 | EX9200-RE2 |
Intel HASWELL-EP Xeon E5-2608L V3 |
EX9200-15C, with JNPR Penta Silicon MACsec ASIC | NA |
| EX9208 | ||||
| EX9214 |