Excluded Functionality; Table 4: Excluded Functionality - Cisco ASR 1000 Series Common Criteria Operational User Guidance And Preparative Procedures

Component Required
NTP Server No
Audit (syslog) Yes
Server
Another No
instance of the
TOE

1.6 Excluded Functionality

Excluded Functionality
Non-FIPS 140-2 mode of operation on the
router.
These services will be disabled by configuration. The exclusion of this functionality does not
affect compliance to the U.S. Government Protection Profile for Security Requirements for
Network Devices.
Usage/Purpose Description for TOE performance
The TOE supports communications with an NTP server in order to synchronize
the date and time on the TOE with the NTP server's date and time. A solution
must be used that supports secure communications with up to a 32 character key.
This includes any syslog server to which the TOE would transmit syslog
messages.
Includes "another instance of the TOE" that would be installed in the evaluated
configuration, and likely administered by the same personnel. Used as a VPN
peer.

Table 4: Excluded Functionality

This mode of operation includes non-FIPS
allowed operations.
Exclusion Rationale
Page 10 of 72