&

CERTIFICACION
SASCHRUO

    

‘MRA recognition for components GERA recognition for components
up to EAL4 and ALC_FLR only Up to EAL 2 and ALC_FLR only

(C (C
centro criptoldgico nacional

CERTIFICATE

CCN-CC-001/2019

SolarWinds Orion Suite for Federal Government v3.0

Type of product Network management tool

Conformance of functionality Product specific Security Target — CC Part 2 conformant
Evaluation Facility Applus Laboratories

Certification Report CCN- CCN-CC/2018-11/INF-2694

Pursuant to the authority vested in me under Act 11/2002 regulating the National Intelligence
Centre, and under Article 1 and Article 2.2.c of Royal Decree 421/2004 of March 12th
regulating the National Cryptologic Centre, | hereby:

Certify that the security of SolarWinds Orion Suite for Federal Government v3.0, developed by
SolarWinds Worldwide, LLC., 7171 Southwest Parkway, Building 400. Austin, TX 78735. United
States of America, has been evaluated using Common Methodology for Information
Technology Security Evaluation/Common Criteria for Information Technology Security
Evaluation version 3.1 release 5, and it has met the requirements of its Security Target
identified as “SolarWinds Orion Software Security Target, version 1.12, July 16, 2018”, for
evaluation assurance level EAL2 + ALC_FLR.2.

Madrid, 8 February 2019
Secretary of State Director

 

 

Félix Sanz Roldan

 

This certificate, its scope and validity are subject to the terms, conditions and requirements specified in the
“Reglamento de Evaluacién y Certificacin de la Seguridad de las T.I.C.” at PRE/2740/2007, September 19th.

The above-mentioned Security Target and Certification Report are available at the National Cryptologic Centre.
 

 

The IT product identified in this certificate has been evaluated at an accredited and
licensed/approved evaluation facility using the Common Methodology for Information
Technology Security Evaluation/Common Criteria for Information Technology Security
Evaluation version 3.1 release 5 and CC Supporting Documents as listed in the Certification
Report. This certificate applies only to the specific version and release of the product in its
evaluated configuration and in conjunction with the complete Certification Report. The
evaluation has been conducted in accordance with the provisions of the Spanish IT Security
Evaluation and Certification Scheme, PRE/2740/2007 September the 19th, and the conclusions
of the evaluation facility in the evaluation technical report are consistent with the evidence
adduced. This certificate is not an endorsement of the IT product by the Spanish Scheme or by
any other organisation that recognises or gives effect to this certificate, and no warranty of the
IT product by the Spanish Scheme or by any other organisation that recognises or gives effect
to this certificate, is either expressed or implied.