Xerox MFP Security Target.pdf

The Xerox Multi-Function Device Security Target (Version 1.2, June 2016) outlines security aspects of Xerox WorkCentre® 7525/7530/7535/7545/7556 devices with FIPS 140-2 compliance over SNMPv3. Key sections include:

1. Introduction & Overview:
- Identifies the Security Target (ST) and its components.
- Describes the device's usage, security features, and required hardware/software.
- Defines the physical and logical scope of the Trusted Operating Environment (TOE).

2. Evaluated Configuration & Conformance Claims:
- Specifies the evaluated configuration and claims conformance to common criteria, protection profiles, and package claims.

3. Security Problem Definition:
- Defines users, objects, operations, and channels, and outlines assumptions, threats, and organizational security policies.

4. Security Objectives:
- Establishes security objectives for the TOE, operational environment, and non-IT environment, along with their rationale.

5. Extended Components Definition & Security Requirements:
- Details the FPTFDIEXP restricted forwarding of data to external interfaces.
- Outlines security policies, functional requirements, and assurance requirements, including:
- IP Filter, User Access Control, TOE Function Access Control, and other security classes (FAU, FCO, FCS, FDP, FIA, FMT, FPR, FPT, FRU, FTA, FTP).
- Explicitly stated requirements and rationale for security functional requirements.

The document aims to ensure the security of Xerox multi-function devices by defining security targets, objectives, and requirements, and by claiming conformance to relevant security standards.