Download CA Layer 7 Security Target

CA Layer 7
Security Target
n)
Global Policy Fragments
2.6.3
Scope of Evaluated Policy Assertions
45
The core functionality of the SecureSpan SOA Gateway is its ability to define and
enforce policies for web services. To achieve this, the SecureSpan SOA Gateway
utilizes a policy assertion language. All available policy assertions are defined in the
Policy Authoring User Manual. Not all policies are related to access control or
security – in order to clarify the relationship between policy assertions and the scope
of evaluation, the following table classifies each policy assertion as one of the
following:
a)
Enforcing. Assertions that enforce the TOE security policy and are the focus
of this evaluation.
b)
Unevaluated Functional. Assertions that facilitate product functionality and
may be present in the evaluated configuration but that do not interfere with the
security functions of the TOE. Such assertions have not been evaluated.
c)
Unevaluated Security. Assertions that are security related but have not been
evaluated.
Table 3: Scope of evaluated policy assertions
Unevaluated
Security
Unevaluated
Functional
Enforcing
Assertion
Access Control Assertions
Authenticate User or Group Assertion
X
Authenticate Against Identity Provider Assertion
X
Require HTTP Basic Credentials Assertion
X
Require SAML Token Profile Assertion
X
Require SSL or TLS Transport Assertion with Client Authentication
(same as Transport Layer Security assertion: Require SSL or TLS
Transport Assertion)
X
Authenticate Against SiteMinder Assertion
X
Authorize via SiteMinder Assertion
X
Check Protected Resource Against SiteMinder Assertion
X
Exchange Credentials using WS-Trust Assertion
X
Extract Attributes from Certificate Assertion
X
Extract Attributes for Authenticated User Assertion
X
Page 17 of 74