Zte ZXR10 M6000 Series - Fdp_Ifc.1; Fdp_Iff.1

ZXR10M6000&T8000&8900ESecurityTarget
FDP_IFF.1.4TheTSFshallexplicitlyauthorizeaninformationowbasedonthefollowing
rules:[none].
FDP_IFF.1.5TheTSFshallexplicitlydenyaninformationowbasedonthefollowingrules:
1.[theTOEshallrejectrequestsforaccessorserviceswherethesourceidentityofthe
informationreceivedbytheTOEisnotincludedinthesetofsourceidentiersforthe
sourcesubject;
2.TheTOEshallrejectrequestsforaccessorserviceswherethesourceidentityofthe
informationreceivedbytheTOEspeciesabroadcastidentity;
3.TheTSFshallrejectrequestsforaccessorserviceswherethepresumedsource
identityoftheinformationreceivedbytheTOEspeciesaloopbackidentier.
4.TheTSFshalldroprequestsinwhichtheinformationreceivedbytheTOEdoesnot
correspondtoanentryintheroutingtable.
5.TheTSFshalldenyinformationowsthatdonotconformtoIPprotocol(RFC791)
andtheassociatedroutingprotocolspecication(RFCsforRIPv2,OSPFv2,IS-ISand
BGPv4)].
5.1.2.9FDP_IFF.1(2)Simplesecurityattributes(exportpolicy)
FDP_IFF.1.1TheTSFshallenforcethe[EXPORTSFP]basedonthefollowingtypesof
subjectandinformationsecurityattributes:
[Sourcesubjectsecurityattributes:sourcenetworkidentier;andDestinationsubject
securityattributes:
1.SYSLOGserverIPaddress;
2.UDPportusedtosendtheSYSLOGmessage;
3.SYSLOGFacilityCode;
4.SYSLOGSeverityThreshold;
5.IPaddressoftheSNMPtrapreceiver;
6.UDPportusedtosendtheSNMPtrap;
7.SNMPv3usedtoformattheSNMPnotication;and
8.SecuritynameandlevelforSNMPv3trapreceivers;].
FDP_IFF.1.2TheTSFshallpermitaninformationowbetweenacontrolledsubjectand
controlledinformationviaacontrolledoperationifthefollowingruleshold:
1.[theidentityofthedestinationsubjectisinthesetofdestinationidentiers;
2.theinformationsecurityattributesmatchthesecurityattributesdenedbythe
administrator)accordingtothefollowingalgorithm[ALLthesecurityattributesmust
match];and
3.theselectedinformationowpolicyrulespeciesthattheinformationowistobe
permitted].
FDP_IFF.1.3TheTSFshallenforcethe[none].
FDP_IFF.1.4TheTSFshallexplicitlyauthoriseaninformationowbasedonthe
followingrules:[none].
5-6
SJ-20110815105844-030|2011/08/19（R1.6）ZTECORPORATION