FCS_COP.1(SIGN) None. None. FCS_COP.1(HASH) None. None. FCS_COP.1(HMAC) None. None. FCS_IPSEC_EXT.1 Decisions to DISCARD, BYPASS, PROTECT Presumed identity of source subject. network packets processed by the TOE. Identity of destination subject. Failure to establish an IPsec SA. Transport layer protocol, if Establishment/Termination of an IPsec SA. applicable. Source subject service identifier, if applicable. The entry in the SPD that applied to the decision. Reason for failure. Non-TOE endpoint of connection (IP address) for both successes and failures FCS_RBG_EXT.1 None. None. FDP_IFC_EXT.1 Failure to establish exclusive tunnel. None. FDP_RIP.2 None. FIA_PSK_EXT.1 Failure of the randomization process. None. FIA_X509_EXT.1 Failure of the X.509 certificate validation Reason for failure of validation. FIA_X509_EXT.2 [if one were required] Failure of the path Reason for failure of path validation. validation of the X.509 certificate FMT_SMF.1 Success or failure of function. None. FPT_TUD_EXT.1 Initiation of the update. No additional information. Any failure to verify the integrity of the update. FTP_ITC.1 All attempts to establish a trusted channel. Identification of the non-TOE Detection of modification of channel data endpoint of the channel. Table 7 Auditable Events Selective Audit (FAU_SEL.1) FAU_SEL.1.1 The TSF shall be able to select the set of events to be audited from the set of all auditable events based on the following attributes: event type; success of auditable security events; failure of auditable security events; and [Object, subject or user identity and host].
FCS_COP.1(SIGN) None. None. FCS_COP.1(HASH) None. None. FCS_COP.1(HMAC) None. None. FCS_IPSEC_EXT.1 Decisions to DISCARD, BYPASS, PROTECT network packets processed by the TOE. Failure to establish an IPsec SA. Establishment/Termination of an IPsec SA. Presumed identity of source subject. Identity of destination subject. Transport layer protocol, if applicable. Source subject service identifier, if applicable. The entry in the SPD that applied to the decision. Reason for failure. Non-TOE endpoint of connection (IP address) for both successes and failures FCS_RBG_EXT.1 None. None. FDP_IFC_EXT.1 Failure to establish exclusive tunnel. None. FDP_RIP.2 None. FIA_PSK_EXT.1 Failure of the randomization process. None. FIA_X509_EXT.1 Failure of the X.509 certificate validation Reason for failure of validation. FIA_X509_EXT.2 [if one were required] Failure of the path validation of the X.509 certificate Reason for failure of path validation. FMT_SMF.1 Success or failure of function. None. FPT_TUD_EXT.1 Initiation of the update. Any failure to verify the integrity of the update. No additional information. FTP_ITC.1 All attempts to establish a trusted channel. Detection of modification of channel data Identification of the non-TOE endpoint of the channel. Table 7 Auditable Events Selective Audit (FAU_SEL.1) FAU_SEL.1.1 The TSF shall be able to select the set of events to be audited from the set of all auditable events based on the following attributes: event type; success of auditable security events; failure of auditable security events; and [Object, subject or user identity and host].
windows%2010%20anniversary%20update%20ipsec%20vpn%20client%20security%20target%20-%20public%20(december%2029%202016)%20(clean).docx