Certified Product: SolarWinds® Log and Event Manager v5.70

SolarWinds Worldwide, LLC.
3711 South MoPac Expressway
Austin, Texas

SolarWinds® Log and Event Manager 5.7.0 (hereafter referred to as Solarwinds LEM), from SolarWinds Worldwide, LLC. was the subject of a Common Criteria evaluation performed by the Common Criteria Evaluation Facility at EWA-Canada. The evaluation was completed in September 2014.

The evaluation of Solarwinds LEM  determined that this Information Technology (IT) product can be trusted, to Evaluation Assurance Level (EAL) 2 augmented with ALC_FLR.2, to conform to the requirements of the associated security target.

LEM collects, stores, and normalizes log and event data from a variety of sources, and displays that data in a web interface for monitoring, searching, and analysis.  Data is also available for scheduled and ad hoc reporting.

Alerts are created from normalized data that LEM uses to display events/messages from LEM monitored devices.  Log data is processed by LEM’s policy engine to correlate data based on user defined Rules.  These actions can include notifying users, blocking an IP address, shutting down or rebooting a workstation, and passing the alerts on to the LEM database for future analysis and reporting within the Reports application. 

The scope of this evaluation is defined by the security target, which identifies assumptions made during the evaluation, the intended environment for the Solarwinds LEM, the IT security requirements to be met, and the level of confidence (evaluation assurance level) to which it is asserted that the Solarwinds LEM satisfies its IT security requirements.

Consumers are advised to carefully review the certification report to gain an understanding of the security functionality, the evaluated configuration, and the intended operating environment for Solarwinds LEM.