HP Inc.
HP LaserJet Enterprise MFP M527 Series,
Color LaserJet Enterprise MFP M577 Series, and
PageWide Enterprise Color MFP 586 Series
Firmware with Jetdirect Inside Security Target
Version: 2.0 Copyright © 2008-2016 by atsec information security corporation and HP Inc. Page 48 of 98
Last update: 2016-06-07 or its wholly owned subsidiaries
5 Extended Components Definition
[PP2600.2-SMI] defines the following extended component:
FPT_FDI_EXP.1: Restricted forwarding of data to external interfaces
5.1 Class FPT: Protection of the TSF
This section describes the functional requirements for the restrictions of forwarding of data to external
interfaces. This extended component is defined in [PP2600.2-SMI].
5.1.1 Restricted forwarding of data to external interfaces (FDI)
Family behaviour
This family defines requirements for the TSF to restrict direct forwarding of information from one external
interface to another external interface.
Many products receive information on specific external interfaces and are intended to transform and
process this information before it is transmitted on another external interface. However, some products
may provide the capability for attackers to misuse external interfaces to violate the security of the TOE or
devices that are connected to the TOE's external interfaces. Therefore, direct forwarding of unprocessed
data between different external interfaces is forbidden unless explicitly allowed by an authorized
administrative role. The family FPT_FDI_EXP has been defined to specify this kind of functionality.
Component levelling
FPT_FDI_EXP.1 Restricted forwarding of data to external interfaces provides for the functionality to
require TSF controlled processing of data received over defined external interfaces before these data are
sent out on another external interface. Direct forwarding of data from one external interface to another
one requires explicit allowance by an authorized administrative role.
Management: FPT_FDI_EXP.1
There are no management activities foreseen.
Audit: FPT_FDI_EXP.1
There are no audit events foreseen.
FPT_FDI_EXP.1 - Restricted forwarding of data to external interfaces 5.1.1.1
The TSF shall provide the capability to restrict data received on [assignment: list
of external interfaces ] from being forwarded without further processing by the
TSF to [assignment: list of external interfaces ].
To Next Page
Loading...