GA/T 1544-2019Information security technology - Security technical requirements for products inspecting configuration of network and security equipment (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

This standard was proposed by the Cyber Security and Protection Bureau of the Ministry of Public Security.

This standard is under the jurisdiction of the Information System Security Standardization Technical Committee of the Ministry of Public Security.

This standard was drafted. Computer Information System Security Product Quality Supervision and Inspection Center of the Ministry of Public Security, Network Security and Protection Bureau of the Ministry of Public Security, Public Security the Third Research Institute of the Ministry of Security, Beijing Suifang Information Technology Co., Ltd., and Beijing Shenzhou Green League Technology Co., Ltd.

1 Scope

This standard specifies the security function requirements, security assurance requirements, and classification requirements for network and security equipment configuration inspection products.

This standard applies to the design, development, and testing of network and security equipment configuration inspection products.

2 Normative references

The following documents are essential for the application of this document. For dated references, only the dated version applies to this article Pieces. For undated references, the latest version (including all amendments) applies to this document.

GB/T 18336.3-2015 Information Technology Security Technology Information Technology Security Evaluation Guidelines Part 3. Security Assurance Components GB/T 25069-2010 Information Security Technology Terminology

3 Terms and definitions

GB/T 18336.3-2015 and GB/T 25069-2010 and the following terms and definitions apply to this document.

Network and security equipment configuration configurationofnetworkandsecurityequipment Records the network settings, security policies, enabling services, and related parameters of the network and security devices.

Network and security equipment configuration inspection product productinspectingconfigurationofnetworkandsecurityequipment Obtain the network and security device configuration, and compare it with a predefined baseline to determine whether it meets the requirements of the baseline product.

4 Network and Security Device Configuration Check Product Description

Network and security device configuration inspection products are usually deployed in the target network in a bypass manner, and collected and analyzed online or offline.

Network and security equipment configuration and configuration check.

Figure 1 is a typical operating environment of network and security equipment configuration check products.