Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 909 / 1016

APPENDIX D
Common Criteria EAL2 Compliance
This appendix describes actions required for a security administrator to properly secure
the Network and Security Manager (NSM) system and NSM User Interface to be in
compliance with the Common Criteria EAL2 security target for Juniper Networks IDP 4.0
functionality.
The NSM system consists of the Device Server and the GUI Server; the NSM User Interface
is a client application used to access information stored in the NSM system.
•
Guidance for Intended Usage on page 859
Guidance for Intended Usage
•
The NSM system must be installed on dedicated systems. These dedicated systems
must not contain user processes that are not required to operate the NSM software.
Guidance for Personnel
• There must be one or more competent individuals assigned to manage the NSM system
and User Interface (UI), and the security of the information that they contain.
•
The authorized administrators must not be careless, willfully negligent, or hostile and
must follow and abide by the instructions provided by the NSM documentation.
• The NSM system and UI must be accessed only by authorized users.
Guidance for Physical Protection
• The processing resources of the NSM system and UI must be located within facilities
with controlled access that prevents unauthorized physical access.
859 Copyright © 2010, Juniper Networks, Inc.