ZXR10M6000&T8000&8900ESecurityTarget
ApplicationNote:Thereisnosuccess/failureconceptforAlarmlog.Thereforethereis
nooutcome(successorfailure)foralarmlog.
5.1.2.2FAU_GEN.2Useridentityassociation
FAU_GEN.2.1Forauditeventsresultingfromactionsofidentiedusers,theTSFshallbe
abletoassociateeachauditableeventwiththeidentityoftheuserthatcausedtheevent.
ApplicationNote:TheCommandlogrecordisassociatedwithanadministrator.The
othertypesoflogareassociatedwithunauthenticateduser/application.
5.1.2.3FAU_SAR.1Auditreview
FAU_SAR.1.1TheTSFshallprovide[authorisedadministrators]withthecapabilitytoread
[allauditdata]fromtheauditrecordsstoredinthelogleoftheTOE
.
FAU_SAR.1.2TheTSFshallprovidetheauditrecordsinamannersuitablefortheuser
tointerprettheinformation.
5.1.2.4FAU_STG.1Protectedaudittrailstorage
FAU_STG.1.1TheTSFshallprotectthestoredauditrecordsintheaudittrailfrom
unauthoriseddeletion.
FAU_STG.1.2TheTSFshallbeableto[prevent]unauthorisedmodicationstothe
storedauditrecordsintheaudittrail.
5.1.2.5FAU_STG.4Preventionofauditdataloss
FAU_STG.4.1TheTSFshall[overwritetheoldeststoredauditrecords]and[noother
actions]iftheaudittrailisfull.
5.1.2.6FDP_IFC.1(1)Subsetinformationflowcontrol(unauthenticated)
FDP_IFC.1.1TheTSFshallenforcethe[unauthenticatedSFP]on:
1.[subjects:eachITentitythatsendsandreceivesinformationthroughtheTOEtoone
another;
2.information:networkpacketssentthroughtheTOEfromonesubjecttoanother;and
3.operations:route/lterpackets].
5.1.2.7FDP_IFC.1(2)Subsetinformationflowcontrol(exportpolicy)
FDP_IFC.1.1TheTSFshallenforcethe[EXPORTSFP]on.
1.[subjects:eachITentitythatreceivesinformationfromtheTOE;
2.information:eventssentfromtheTOEtoSNMPtrapandSYSLOGservers;and
3.operations:sendevents].
5-4
SJ-20110815105844-030|2011/08/19(R1.6)ZTECORPORATION