NetApp Data ONTAP Version 7.3.1.1
NetApp, Inc.
495 E. Java Dr.
Sunnyvale, CA 94089
Data ONTAP Version 7.3.1.1 (hereafter referred to as Data ONTAP) from NetApp was the subject of a Common Criteria evaluation performed by the Common Criteria Evaluation Facility at DOMUS IT Security Laboratory, located in Ottawa, Ontario, Canada. The evaluation was completed in November 2009.
The evaluation of Data ONTAP determined that this Information Technology (IT) product can be trusted, to an assurance level of EAL 3 augmented with ALC_FLR.3 (Systematic flaw remediation), to conform to the requirements of the associated security target.
NetApps storage solution products execute a proprietary microkernel operating system, Data ONTAP, which provides data management functions that include secure data storage and multi-protocol access. Data ONTAP is divided into three components: WAFL, Operating System Kernel and System Administration. The WAFL component is responsible for implementing the discretionary access control security function policy by enforcing access rules to user data based on client type, client security attributes, file types, file security attributes and access request (create, read, write, execute, delete, change permission, and change owner). The Operating System Kernel component provides the communications between the components of the Operating System. The System Administration component provides an operator interface supporting operator functions including enforcing identification and authentication, user roles and providing the necessary user interface commands that enable an operator to support the Data ONTAP security functionality.
The scope of this evaluation is defined by the security target, which identifies assumptions made during the evaluation, the intended environment for Data ONTAP, the IT security requirements to be met, and the level of confidence (evaluation assurance level) to which it is asserted that the Data ONTAP satisfies its IT security requirements.
Consumers are advised to carefully review the certification report to gain an understanding of the security functionality, the evaluated configuration, and the intended operating environment for Data ONTAP.
Security Target: PDF (372KB) * Accessibility Notice * Official Languages Notice