Dell PowerConnect W-Series FIPS Dell PowerConnect W-600 Controller Series Secu - Page 17

FIPS 140-2 Level 2 Features, Intended Level of Security, Physical Security, Operational Environment

Page 17 highlights

Chapter 2 FIPS 140-2 Level 2 Features Intended Level of Security The Aruba 620 and 650 Mobility Controllers and associated modules are intended to meet overall FIPS 1402 Level 2 requirements as shown in Table 2-1. Table 1 Intended Level of Security Section Section Title Level 1 Cryptographic Module Specification 2 2 Cryptographic Module Ports and Interfaces 2 3 Roles, Services, and Authentication 2 4 Finite State Model 2 5 Physical Security 2 6 Operational Environment N/A 7 Cryptographic Key Management 2 8 EMI/EMC 2 9 Self-tests 2 10 Design Assurance 2 11 Mitigation of Other Attacks 2 Physical Security The Aruba Mobility Controller is a scalable, multi-processor standalone network device and is enclosed in a robust steel housing. The switch enclosure is resistant to probing and is opaque within the visible spectrum. The enclosure of the switch has been designed to satisfy FIPS 140-2 Level 2 physical security requirements. To protect the Aruba 620 and 650 Mobility Controllers from any tampering with the product, TELs should be applied by the Crypto Officer as covered under "Tamper-Evident Labels" on page 30. Operational Environment The operational environment is non-modifiable. The control plane Operating System (OS) is Linux, a realtime, multi-threaded operating system that supports memory protection between processes. Access to the underlying Linux implementation is not provided directly. Only Aruba Networks provided interfaces are used, and the CLI is a restricted command set. Aruba 620, 650 and Dell W-620, W-650 | FIPS 140-2 Level 2 Release Supplement FIPS 140-2 Level 2 Features | 15

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42

Aruba 620, 650 and Dell W-620, W-650
|
FIPS 140-2 Level 2 Release Supplement
FIPS 140-2 Level 2 Features
|
15
Chapter 2
FIPS 140-2 Level 2 Features
Intended Level of Security
The Aruba 620 and 650 Mobility Controllers and associated modules are intended to meet overall FIPS 140-
2 Level 2 requirements as shown in Table 2-1.
Physical Security
The Aruba Mobility Controller is a scalable, multi-processor standalone network device and is enclosed in a
robust steel housing. The switch enclosure is resistant to probing and is opaque within the visible spectrum.
The enclosure of the switch has been designed to satisfy FIPS 140-2 Level 2 physical security requirements.
To protect the Aruba 620 and 650 Mobility Controllers from any tampering with the product, TELs should be
applied by the Crypto Officer as covered under
“Tamper-Evident Labels” on page 30
.
Operational Environment
The operational environment is non-modifiable. The control plane Operating System (OS) is Linux, a real-
time, multi-threaded operating system that supports memory protection between processes. Access to the
underlying Linux implementation is not provided directly. Only Aruba Networks provided interfaces are
used, and the CLI is a restricted command set.
Table 1
Intended Level of Security
Section
Section Title
Level
1
Cryptographic Module Specification
2
2
Cryptographic Module Ports and Interfaces
2
3
Roles, Services, and Authentication
2
4
Finite State Model
2
5
Physical Security
2
6
Operational Environment
N/A
7
Cryptographic Key Management
2
8
EMI/EMC
2
9
Self-tests
2
10
Design Assurance
2
11
Mitigation of Other Attacks
2