Cisco ASR 1000 Series Common Criteria Operational User Guidance And Preparative Procedures page 61

Requirement
FPT_FLS.1: Fail Secure
FPT_SKP_EXT.1: Protection
of TSF Data (for reading of
all symmetric keys)
FPT_APW_EXT.1:
Protection of Administrator
Passwords
FPT_STM.1: Reliable time
stamps
FPT_TUD_EXT.1: Trusted
update
FPT_TST_EXT.1: TSF
testing
FTA_SSL_EXT.1: TSF-
initiated session locking
Management Action to
Log
None
None
None
Changes to NTP settings.
Manual changes to the
system time.
Software updates
None
Specifying the inactivity
time period.
Sample Log
Oct 15 23:39:50 cc_toe 21696: Oct 15
23:39:49.881: \%PARSER-5-
CFGLOG_LOGGEDCMD: User:script logged
command:ip access-list extended
FPF_RUL_EXT.1.6.T1-permit
Oct 15 23:39:50 cc_toe 21704: Oct 15
23:39:50.625: \%PARSER-5-
CFGLOG_LOGGEDCMD: User:script logged
command:ip access-group
N/A
N/A
N/A
Changes to NTP settings:
Manual changes to the system time:
Feb 5 2013 06:28:00.000: %SYS-6-
CLOCKUPDATE: System clock has been updated
from 11:27:52 UTC Tue Feb 5 2013 to 06:28:00
UTC Tue Feb 5 2013, configured from console by
admin on console.
Jul 10 2013 11:04:09.179: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command:upgrade
N/A
Feb 15 2013 13:12:25.055: %PARSER-5-
CFGLOG_LOGGEDCMD: User:cisco logged
command: exec-timeout 60
Page 61 of 72