Assurance Level: EAL2

Vendor: SurfControl plc

Certification: Canada

Estimated Approval:

Product Type: Network Security

Contact: Crispin Kerr

Phone: +61 (2) 9414 0027
Fax: +61 (2) 9414 0099
Email: crispin.kerr@surfcontrol.com
Web: www.surfcontrol.com

	Security Target [opens new window]
	Certification Report [opens new window]

The SurfControl E-mail Filter for SMTP is a server-based software application that enforces an acceptable usage policy for SMTP-based e-mail. The E-mail Filter for SMTP scans the content, origin, destination, attachments, and size of all SMTP-based e-mail to and from the Internet, and applies the policy rules established by the E-mail Filter for SMTP administrator.

The specific security functions provided by the TOE are:

• Security Audit: logs of critical events are recorded in the System Log table in a database and can be reviewed from within the TOE.
• User Data Protection: discretionary information flow policy is provided for SMTP based e-mail messages (user data) as they flow through the various filtering mechanisms and only identified and authenticated users can access the User Data (SMTP e-mail messages) stored in the various queues.
• Identification and Authentication: username and password identification and authentication must be successful before any other security mediated functions are available to the user.
• Security Management: users with appropriate privileges are allowed to perform various management and administration functions.

.