AVIRA MANAGED EMAIL SECURITY - V1.0 Installation Guide download pdf (Page 11)

• HTTPS with Secure Socket Layer (SSL) version 3.0 or Transport Layer Security (TLS) version 1

encryption, using RC4 with 128‑bit cryptographic key siz

e, or 3DES with 112‑bit cryptographic key

size

SSLv2 and SSLv1 protocols must be explicitly disabled and cleartext not permitted for the

connection with the TOE user interface.

• Activ

eX enabled

TOE environment guidelines

You must adhere to these security objectives in the TOE operating environment as specified in McAfee

Email Gateway 7.0.1 Security Target.

• The administrators of the appliance must review all associated documentation and guidance before

installing and managing the device. Administr

ation of the Email Gateway Appliance requires a base

of knowledge in networking and traffic management. The administrator is responsible for ensuring

that qualified personnel complete all tasks described herein and in references.

• The location of the appliance should protect it from casual access by unauthorized personnel, and

provide physical protection appropriate for the deployment.

• Administrators of the appliance must ensure that the appliance is not used for any purpose other

than its primary function to perform content scanning of email. Do not install non‑TOE software on

the appliance.

• Administrators of the appliance must ensure that all DAT signature files and scanning engine

update files provided by the anti‑virus vendor are installed on the appliance(s) to maintain the

currency of the scanning signature files.

• The administrator management computer must be kept free from malware or other malicious

software.

• Administrators of the appliance must apply the guidance provided in Install the appliance on page

14 to ensure that all traffic between the TOE and administration computer for administrator

sessions is protected with SSL v3.0/TLS v1.0.

• Administrators of the appliance must perform regular checks to ensure the cached DNS entries on

the network devices are not misdirecting the update requests sent to McAfee.

• The management information exchanged between instances of the McAfee Email Gateway in a

cluster must be protected from unauthorized interception and eavesdropping.

Preparing the Common Criteria environment

TOE environment guidelines

McAfee

Email Gateway 7.0.1 Common Criteria Ev

aluated Configuration Guide

Appliances

1 2 ... 6 7 8 9 10 11 12 13 14 15 16 ... 29 30

No comments

AVIRA MANAGED EMAIL SECURITY - V1.0 Installation Guide Page 11