Network Access Control (Tsf_Nac) - Samsung X4220 Instruction Manual

Samsung Multifunction MultiXpress X4220, X4250, X4300, X401, K4250, K4300, K4350, K401 Series
The TOE does not display the entered U.USER's login password while the authentication is in
progress. The TOE displays a sequence of '*' or '•' characters whose length is the same as that of the
entered.
If U.USER is identified and authenticated, the use of the TOE by the U.USER is allowed as the
identified User Role. The User Role assigned to the User ID and User group ID at login will be
maintained during a session.
U.ADMINISTRATOR can make periodical password expiration compulsory. If password expiration
period is enabled, the default period value is 90 days and can be set to 1-180 day(s).
TOE enforces the Common Access Control SFP, TOE Function Access Control SFP, and Service
(PRT, SCN, CPY, FAX) Access Control SFP based on the User ID, User Role and User Group ID
when U.NORMAL performs read/delete/modify operations on the data (D.DOC, D.FUNC) owned by
U.NORMAL or when U.NORMAL accesses print/scan/copy/fax functions offered by the MFP.
- Common Access Control SFP
U.NORMAL is able to perform modify & delete operations on the objects (D.FUNC) owned by
his/her own when doing print/scan/fax-in/fax-out job, and U.NORMAL is able to perform delete
operation on the objects (D.DOC) owned by his/her own. In other words, U.NORAL is denied to
perform the operations on the object except for his/her own documents.
- TOE Function Access Control SFP
Base on security attribute (User ID, User Role, User Group ID), U.NORMAL is able to execute the
printing/scanning/copying/faxing functions explicitly authorized by U.ADMINISTRATOR to use the
function.
- Service (PRT, SCN, CPY, FAX) Access Control SFP
U.NORMAL is able to perform read operation on the objects (D.DOC) owned by his/her own when
doing print/scan/fax-in/fax-out job. In other words, U.NORAL is denied to perform the operation on
the object except for his/her own documents. However, there is no access control restriction
associated with a copy job.

7.1.2 Network Access Control (TSF_NAC)

Relevant SFR: FDP_IFC.2, FDP_IFF.1, FMT_MSA.1(4), FMT_MSA.3(4)
The TOE has a network interface to communicate through the network. The TOE can send/receive
data and configuration information.
The TOE enforces the network access control policy on external IT entities for the network packet
and all operation that cause that information to flow to and from external IT entities.
The TOE provides two network access control policies.
- Protocol/Port control:
1) Network protocols: Raw TCP/IP Printing, LPR/LPD, HTTP, SLP, UPnP, mDNS, WINS,
SNMPv1/v2, HTTPS, DDNS, WSD, SNMPv3 Protocol
2) Service port number: Logical channel in the range of 1 to 65535
88

Copyright 2014 SAMSUNG ELECTRONICS Co., Ltd., All rights reserved