Cisco Cat4K NDPP ST
EDCS-1228241
This SFR was taken from NDPP – where it is defined as a requirement for
specific password composition and aging constraints..
FIA_UAU_EXT.5:
This SFR was taken from NDPP – where it is defined as a requirement
allowing the identification of required external authentication services.
FIA_UIA_EXT.1:
This SFR was taken from NDPP – where it is defined as a requirement
combining both identification and authentication requirements.
FPT_PTD_EXT.1:
This SFR was taken from NDPP (as FPT_PTD.1(1)) –where it is defined as a
requirement specifically disallowing access to identified TSF data. Note, in the
NDPP this SFR is not represented as an Extended Requirement with the
inclusion of the 'EXT' qualifier. However this SFR is not represented in the
Part 2 CC, as such the ST Author has corrected by including the 'EXT'
qualifier.
FPT_PTD_EXT.2:
This SFR was taken from NDPP (as FPT_PTD.1(2)) – where it is defined as a
requirement specifically disallowing access to identified TSF data. Note, in the
NDPP this SFR is not represented as an Extended Requirement with the
inclusion of the 'EXT' qualifier. However this SFR is not represented in the
Part 2 CC, as such the ST Author has corrected by including the 'EXT'
qualifier.
FPT_TST_EXT.1:
This SFR was taken from NDPP – where it is defined as a requirement for TSF
self tests of the TOE during initialization (on bootup).
FPT_TUD_EXT.1:
This SFR was taken from NDPP – where it is defined as a requirement for
secure TOE update capabilities.
FTA_SSL_EXT.1:
This SFR was taken from NDPP – where it is defined as a requirement for
behavior after local terminal session inactivity.
5.4
TOE SFR Dependencies Rationale
The following table provides dependency rational for SFRs that were drawn from the
NDPP.
Table 17: SFR Dependency Rationale (from NDPP)
54
11 March 2014