Introduction
Assumptions
6
Operational User Guidance and Preparative Procedures Supplement for Common Criteria
The McAfee VirusScan Enterprise 8.8 and ePolicy Orchestrator 4.5 (hereafter called “Target of
Evaluation” or the “TOE”) has achieved Common Criteria Evaluation Assurance Level 2 and augmented
by ALC_FLR.2 – Flaw Reporting Procedures.
Please visit:
http://www.commoncriteriaportal.org
for more information on the Common Criteria.
Assumptions
The TOE and the TOE operating environment should be managed to satisfy the assumptions presented
in the following sections.
Authorized Administrators
Authorized administrators are non-hostile, are authenticated to the internal network, and follow all
administrator guidance. Human users (considered to be anyone who interacts with the TOE) who are
not authorized administrators cannot access the administration features.
Physical Access
The TOE must be located in a physically secure environment, and only an authorized administrator has
access to this environment. The evaluated configuration of the TOE can be compromised if an intruder
gains physical access to the product. Therefore only authorized administrators shall be allowed
physical access to the workstation(s) for power/reset controls.
Acronyms
The following table lists the acronyms used in this document:
Table 1 – Acronyms and Terms
Acronym
Term
CC
Common Criteria
EAL
Evaluation Assurance Level
TOE
Target of Evaluation
TSF
TOE Security Function
