Cisco ASR 1000 Series Common Criteria Operational User Guidance And Preparative Procedures page 60

Requirement
FIA_UAU_EXT.2:
Password-based
authentication mechanism
FIA_UAU.7: Protected
authentication feedback
FIA_X509_EXT.1: X.509
Certificate Validation
FMT_MOF.1: Management
of Security Functions
Behavior
FMT_MTD.1: Management
of TSF data
FMT_SMF.1: Specification
of management functions
FMT_SMR.2: Restrictions
on Security roles
FPT_RUL_EXT.1: Packet
Filtering
Management Action to
Log
None
None
Generating a certificate.
See all other rows in table.
See all other rows in table.
See all other rows in table.
Configuring administrative
users with specified roles.
Configuring packet
filtering rules.
Sample Log
[Source: 21.0.0.3] [localport: 22] at 00:05:49 EST
Thu Jan 17 2013
N/A
N/A
Feb 17 2013 16:14:47: %PARSER-5-
CFGLOG_LOGGEDCMD: User:test_admin
logged command: crypto key generate
N/A
N/A
N/A
Feb 15 2013 13:12:25.055: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command: username admin 15
Oct 15 23:39:50 cc_toe 21698: Oct 15
23:39:50.077: \%PARSER-5-
CFGLOG_LOGGEDCMD: User:script logged
command:permit icmp 10.32.0.203 0.0.0.0
10.31.0.101 0.0.0.0 log
Oct 15 23:39:50 cc_toe 21700: Oct 15
23:39:50.261: \%PARSER-5-
CFGLOG_LOGGEDCMD: User:script logged
command:deny icmp 10.32.0.203 0.0.0.0
10.31.0.101 0.0.0.0 log
Page 60 of 72