I am in the process of designing a network connection that must conform to the National Information Assurance Partnership (NIAP) Common Criteria, but I have run into a slight problem getting the PIX configuration approved.
The problem is not with the PIX hardware or software. The problem is that the Target of Evaluation (TOE) which was used to certify the PIX firewall *requires* the use of PIX Firewall Syslog Server 5.1(3). PFSS software is no longer available from Cisco, and I only have version 5.1(2). The result is that the use of a PIX firewall (or ASA) will remain unapproved until, or unless, I can find PFSS 5.1(3).
This brings me to my two questions:
1. Is my information on NIAP Common Criteria certified Cisco equipment correct? That is, are there newer certifications for Cisco products that do *not* require the use of PFSS as the syslog server?
2. Is there any place where I can still obtain the PIX Firewall Syslog Server software version 5.1(3)?
The Cisco Aironet 1240AG Series supports 802.11i, Wi-Fi Protected Access (WPA), WPA2, and numerous Extensible Authentication Protocol (EAP) types. WPA and WPA2 are the Wi-Fi Alliance certifications for interoperable, standards-based WLAN security. These certifications support IEEE 802.1X for user-based authentication, Temporal Key Integrity Protocol (TKIP) for WPA encryption, and Advanced Encryption Standard (AES) for WPA2 encryption. These certifications help to ensure interoperability between Wi-Fi-certified WLAN devices from different manufacturers
Nonetheless, the Aironet products will not solve this issue. Since posting the original request for assistance, I have learned that the requirement is for NIAP-CC EAL4 certification, and the Aironet is (or was) being evaluated for EAL2 certification. Additionally, the Aironet products are being evaluated for IDS/IPS and Wireless LAN, instead of Firewall, compliance.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...