Zte ZXR10 M6000 Series - Fpt_Stm.1; Fta_Ssl.3; Fta_Tse.1; Ftp_Itc.1

ZXR10M6000&T8000&8900ESecurityTarget
requiredprivilegelevel.Theadministratorcanexecutecommandswithrequiredprivilege
levelslowerthanorequaltohisprivilegelevel.
5.1.2.24FPT_STM.1Reliabletimestamps
FPT_STM.1.1TheTSFshallbeabletoprovidereliabletimestampsforitsownuse.
ApplicationNote:ThereisahardwareclockintheTOE;thelogrecordscangetthe
timestampfromthehardwareclock.Therearetwowaystosynchronizetimestampof
hardwareclock.OneismanualsynchronizationbytheCLIcommandandtheotheris
automaticsynchronizationbytheNTPserver.Theautomaticsynchronizationrequiresthe
NTPservicetobecongured,withtherouteractingasaNTPclienttoreceivetimeservices
fromexternalNTPservers.
5.1.2.25FTA_SSL.3TSF-initiatedtermination
FTA_SSL.3.1TheTSFshallterminateaninteractivesessionafteran[administrator
denedperiodofinactivitywithinarangeof1to1000minutes].
5.1.2.26FTA_TSE.1TOEsessionestablishment
FTA_TSE.1.1TheTSFshallbeabletodenysessionestablishmentbasedon[maximum
numberofconcurrentremotesessionsonthenode,values15].
5.1.2.27FTP_ITC.1(1)Inter-TSFtrustedchannel(SSH)
FTP_ITC.1.1TheTSFshallprovideacommunicationchannelbetweenitselfandSSH
clientthatislogicallydistinctfromothercommunicationchannelsandprovidesassured
identicationofitsendpointsandprotectionofthecommunicateddatafrommodication
ordisclosure.
FTP_ITC.1.2TheTSFshallpermit[theSSHclient]toinitiatecommunicationviathe
trustedchannel.
FTP_ITC.1.3TheTSFshallrequiretheuseofthetrustedchannelfor[
1.userauthentication,
2.conguremanagement].
5.1.2.28FTP_ITC.1(2)Inter-TSFtrustedchannel(RADIUS/TACACS+)
FTP_ITC.1.1TheTSFshallprovideacommunicationchannelbetweenitselfand
RADIUS/TACACS+server
thatislogicallydistinctfromothercommunicationchannelsand
providesassuredidenticationofitsendpointsandprotectionofthecommunicateddata
frommodicationordisclosure.
ApplicationNote:forinformationdisclosure,theTSFonlyprotectsthepassword
informationfromdisclosure.
FTP_ITC.1.2TheTSFshallpermit[theTSF]toinitiatecommunicationviathetrusted
channel.
5-10
SJ-20110815105844-030|2011/08/19（R1.6）ZTECORPORATION