Maintenance Addendum: McAfee Application Control v6.1 and Change Control v6.1 with McAfee Agent v4.6 and ePolicy Orchestrator v4.6

Readers are reminded that the certification of this Target of Evaluation (TOE) is the result of maintenance, rather than an actual re-evaluation. Maintenance only considers the affect of TOE changes on the assurance baseline (i.e. the original certified TOE); maintenance is not intended to provide assurance in regard to the resistance of the TOE to new vulnerabilities or attack methods discovered since the date on the original Common Criteria certificate. Such assurance can only be gained through re-evaluation.

Using a security impact analysis of the changes made to the TOE, which was provided by the developer, the Certification Body has determined that the impact of changes on the TOE are considered minor and that re-evaluation is not required. A summary of the results can be found in the Maintenance Report for McAfee Application Control v6.1 and Change Control v6.1 with McAfee Agent v4.6 and ePolicy Orchestrator v4.6, which is written in relation to the original Certification Report v1.0, and the Security Target v0.6. Readers are therefore reminded to read the Security Target, the Certification Report, and the Maintenance Report to fully understand the meaning of what a maintained certificate represents.

Product Name: McAfee Application Control v6.1 and Change Control v6.1 with McAfee Agent v4.6 and ePolicy Orchestrator v4.6

Vendor: McAfee, Inc.

Product Type: Data Protection

Date of Maintenance Completion: December 27, 2012

Conformance Claim: EAL 3+

Original Evaluated TOE: McAfee Application Control v5.0, Change Control v5.0, and Integrity Monitor v5.0 with McAfee Agent v4.5 and ePolicy Orchestrator v4.5

Protection Profile Identifier: n/a

Original Security Target: McAfee Application Control v5.0, Change Control v5.0, and Integrity Monitor v5.0 with McAfee Agent v4.5 and ePolicy Orchestrator v4.5 Security Target, Evaluation Assurance Level: EAL3+, Document Version: 0.6

Please note: this is the Security Target for the Original Evaluated TOE; consequently, it does not reference the maintained version, although it applies to the maintained version.

Original Certification Report: Certification Report EAL3+ Evaluation of McAfee, Inc. Application Control v5.0, Change Control v5.0, and Integrity Monitor v5.0 with McAfee Agent v4.5 and ePolicy Orchestrator v4.5, Evaluation Number: 383-4-153-CR, CR Version: 1.0, Date: 2011-01-14.

Please note: this is the Certification Report for the Original Evaluated TOE; consequently, it does not refer to this maintained version, although it applies to the maintained version.

Maintenance Report: HTML | PDF (22KB)
Please note: this serves as an addendum to the Certification Report for the Original Evaluated TOE.