Maintenance Addendum WatchGuard Firebox X Family: Core™ / Peak™ Series and Core™ / Peak™ e-Series with Fireware™ v8.3 (August 2006)
Maintenance Report
WatchGuard Firebox® X Family: Core™ / Peak™ Series and Core™ / Peak™ e-Series with Fireware™ v8.3
Issued by:
Communications Security Establishment
Certification Body
Canadian Common Criteria Evaluation and Certification Scheme
© 2006 Government of Canada, Communications Security Establishment
| Document number | 383-7-12-MR |
|---|---|
| Version | 1.0 |
| Date | 31 August 2006 |
1 Introduction
On 17 August 2006, Electronic Warfare Associates-Canada (EWA-Canada) submitted an Impact Analysis Report to the CCS Certification Body on behalf of WatchGuard Technologies, Inc., the developer of the Firebox® X Family: Core™ / Peak™ Series and Core™ / Peak™ e-Series with Fireware™ v8.3 product. The Impact Analysis Report is intended to satisfy requirements outlined in version 1.0 of the Common Criteria document CCIMB-2004-02-009: Assurance Continuity: CCRA Requirements. In accordance with those requirements, the Impact Analysis Report (IAR) describes the changes made to Firebox® X Family: Core™ / Peak™ Series and Core™ / Peak™ e-Series with Fireware™ v8.3 (the maintained Target of Evaluation), the evidence updated as a result of the changes and the security impact of the changes.
2 Description of changes
The following characterizes the changes implemented in the Firebox® X Family: Core™ / Peak™ Series and Core™ / Peak™ e-Series with Fireware™ v8.3 product. For each change, it was verified that there were no required changes to the security functional requirements in the ST, and thorough functional and regression testing was conducted to ensure that the assurance in the Target of Evaluation (TOE) was maintained. The changes in version 8.3 comprise:
- software changes that enhance the product features; and
- hardware additions that enhance the product performance.
3 Affected developer evidence
Modifications to the product necessitated changes to a subset of the developer evidence that was previously submitted for the TOE. The set of affected developer evidence was identified in the IAR, and revised versions of all affected developer evidence were submitted.
4 Conclusions
The changes to the TOE were features enhancements and hardware additions improving performance and allowing for future expansion. Through functional and regression testing of the Firebox® X Family: Core™ / Peak™ Series and Core™ / Peak™ e-Series with Fireware™ v8.3, assurance gained in the original TOE certification was maintained. As all of the changes to the TOE have been classified as minor, it is the conclusion of the CB that the maintained TOE is appropriate for assurance continuity and re-evaluation is not required.
5 References
- Assurance Continuity: CCRA Requirements, CCIMB-2004-02-009, version 1.0, February 2004.
- Technical Oversight for Assurance Continuity of a Certifed TOE, version 1.2, October 2005.
- Certification Report EAL4 Evaluation of WatchGuard Technologies, Inc. Firebox® X Family: Core™ and Peak™ Series with Fireware™ Version 8.0.