Cisco ISR 4000 Family Routers Administrator Guidance
Page
11
of
66
2.
Secure Acceptance of the TOE
In order to ensure the correct TOE is received, the TOE should be examined to ensure that that is
has not been tampered with during delivery.
Verify that the TOE software and hardware were not tampered with during delivery by performing
the following actions:
Step 1
Before unpacking the TOE, inspect the physical packaging the equipment was delivered in.
Verify that the external cardboard packing is printed with the Cisco Systems logo and motifs. If it
is not, contact the supplier of the equipment (Cisco Systems or an authorized Cisco
distributor/partner).
Step 2
Verify that the packaging has not obviously been opened and resealed by examining the
tape that seals the package. If the package appears to have been resealed, contact the supplier of
the equipment (Cisco Systems or an authorized Cisco distributor/partner).
Step 3
Verify that the box has a white tamper-resistant, tamper-evident Cisco Systems bar coded
label applied to the external cardboard box. If it does not, contact the supplier of the equipment
(Cisco Systems or an authorized Cisco distributor/partner). This label will include the Cisco
product number, serial number, and other information regarding the contents of the box.
Step 4
Note the serial number of the TOE on the shipping documentation. The serial number
displayed on the white label affixed to the outer box will be that of the device. Verify the serial
number on the shipping documentation matches the serial number on the separately mailed invoice
for the equipment. If it does not, contact the supplier of the equipment (Cisco Systems or an
authorized Cisco distributor/partner).
Step 5
Verify that the box was indeed shipped from the expected supplier of the equipment (Cisco
Systems or an authorized Cisco distributor/partner). This can be done by verifying with the
supplier that they shipped the box with the courier company that delivered the box and that the
consignment note number for the shipment matches that used on the delivery. Also verify that the
serial numbers of the items shipped match the serial numbers of the items delivered. This
verification should be performed by some mechanism that was not involved in the actual
equipment delivery, for example, phone/FAX or other online tracking service.
Step 6
Once the TOE is unpacked, inspect the unit. Verify that the serial number displayed on the
unit itself matches the serial number on the shipping documentation and the invoice. If it does not,
contact the supplier of the equipment (Cisco Systems or an authorized Cisco distributor/partner).
Also verify that the unit has the following external identification as described in Table 5 below.
Table 5 TOE External Identification
Product Name
Model
Number
External
Identification
Integrated Services Routers (ISR) 4000 Family Routers
4321
ISR 4321
Integrated Services Routers (ISR) 4000 Family Routers
4331
ISR 4331
Integrated Services Routers (ISR) 4000 Family Routers
4351
ISR 4351
Step 7
Approved methods for obtaining a Common Criteria evaluated software images:
