beautypg.com

Dell C7765DN MFP Color Laser Printer User Manual

Page 18

background image

Dell C7765dn Security Target

- 14 -

・ Refer to and set the User Authentication;
・ Refer to and set the Store Print;
・ Refer to and set the date and time;
・ Refer to and set the Self Test;

Additionally, this TOE allows only the system administrator, who is authenticated from the

system administrator client via Web browser using Configuration Web Tool, to refer to and set the

following security functions via Configuration Web Tool:

・ Set the ID the password of key operator (only a key operator is privileged);
・ Refer to and set the ID of SA / general user, and set the password (with local authentication

only);

・ Refer to and set the access denial when system administrator’s authentication fails;
・ Refer to and set the limit of user password length (for general user and SA, with local

authentication only);

・ Refer to and set Audit Log;
・ Refer to and set the SSL/TLS communication;
・ Refer to and set the IPSec communication;
・ Refer to and set the SNMPv3 communication;
・ Refer to and set the SNMPv3 authentication password.
・ Refer to and set the S/MIME communication;
・ Create/upload/download an X.509 certificate;
・ Refer to and set the User Authentication;

(5) Customer Engineer Operation Restriction

This TOE allows only the authenticated system administrator to refer to or enable/disable the

Customer Engineer Operation Restriction setting from the control panel and Configuration Web

Tool. For this, CE cannot refer to or change the setting of each function described in (4) System

Administrator’s Security Management.

(6) Security Audit Log

The important events of TOE such as device failure, configuration change, and user operation are

traced and recorded based on when and who operated what function. Only a system administrator

can supervise or analyze the log data by downloading them in the form of tab-delimited text file

via Web browser using Configuration Web Tool. To download the log data, SSL/TLS

communication needs to be enabled.

(7) Internal Network Data Protection

The communication data on the internal network such as document data, security audit log data,

and TOE setting data are protected by the following general encryption communication-protocols:

・ SSL/TLS
・ IPSec