Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Citrix NetScaler Platinum Edition Load Balancer, Version 9.3, running on MPX 9700-FIPS, MPX 10500-FIPS, MPX 12500-FIPS, MPX 15500-FIPS, MPX 5500, MPX 7500, MPX 9500, MPX 10500, MPX 11500, MPX 12500, MPX 13500, MPX 14500, MPX 15500, MPX 16500, MPX 17500, MPX 17550, MPX 18500, MPX 19500, MPX 19550, MPX 20500, MPX 20550, MPX 21500, MPX 21550, VPX 10, VPX 200, VPX 1000, VPX 3000
CRP267
Attivo BotSink Solution
SERTIT-084
name Citrix NetScaler Platinum Edition Load Balancer, Version 9.3, running on MPX 9700-FIPS, MPX 10500-FIPS, MPX 12500-FIPS, MPX 15500-FIPS, MPX 5500, MPX 7500, MPX 9500, MPX 10500, MPX 11500, MPX 12500, MPX 13500, MPX 14500, MPX 15500, MPX 16500, MPX 17500, MPX 17550, MPX 18500, MPX 19500, MPX 19550, MPX 20500, MPX 20550, MPX 21500, MPX 21550, VPX 10, VPX 200, VPX 1000, VPX 3000 Attivo BotSink Solution
scheme UK NO
not_valid_after 04.02.2015 13.02.2022
not_valid_before 12.03.2012 13.02.2017
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/CRP267%20v1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/20170201%20S-084%20CRv1.0%20Attivo.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ST267%20v1.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ST%20Attivo%20Networks%20-%20Botsink%20Solution%20v.1.3%20-%20Final_Release.pdf
manufacturer Citrix Systems, Inc. Attivo Networks, Inc.
manufacturer_web https://www.citrix.com https://attivonetworks.com
security_level EAL2+, ALC_FLR.2 EAL2+, ALC_FLR.1
dgst eb375c5d1192d491 1bc10dc246304b33
heuristics/cert_id CRP267 SERTIT-084
heuristics/extracted_sars ASE_INT.1, AVA_VAN.2, ADV_FSP.2, ASE_ECD.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ADV_TDS.1, ATE_FUN.1, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, ALC_FLR.2, ASE_REQ.2, ALC_CMC.2, ATE_IND.2, ASE_CCL.1 ASE_INT.1, AVA_VAN.2, ADV_FSP.2, ASE_ECD.1, ALC_FLR.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ADV_TDS.1, ATE_FUN.1, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, ASE_REQ.2, ALC_CMC.2, ATE_IND.2, ASE_CCL.1
heuristics/extracted_versions 9.3 -
heuristics/report_references/directly_referenced_by CRP274 {}
heuristics/report_references/directly_referencing CRP262 {}
heuristics/report_references/indirectly_referenced_by CRP274 {}
heuristics/report_references/indirectly_referencing CRP253, CRP262, CRP247 {}
heuristics/scheme_data
  • category: Network and Network-Related Devices and Systems
  • certification_date: 13.02.2017
  • developer: Attivo Networks, Inc.
  • enhanced:
    • category: Network and Network-Related Devices and Systems
    • cert_id: SERTIT-084
    • certification_date: 13.02.2017
    • description: The Attivo BOTsink Deception System Deception and Decoy for Inside-the-Network Threat Detection The Attivo BOTsink solution uses dynamic deception techniques and a matrix of distributed decoy systems to turn an entire network into a trap, which is designed to deceive and detect attackers and their automated tools into revealing themselves. Whether the attack vector is zero day, stolen credential, ransomware, phishing or an insider threat, the BOTsink system provides an effective and efficient solution to detect these threats in real-time. Prevention-based detection does not reliably detect signature-less attacks, the use of stolen credentials, and the lateral movement of attacks that have bypassed firewall, anti-virus and other prevention solutions. Not reliant on known attack patterns or signatures, Attivo will instead use deception to deceive the attacker into engaging. Once the attacker engages, an alert is immediately created with the substantiated attack detail required to block the attacker and quarantine the infected device. The attack details can be viewed in the Attivo Threat Intelligence Dashboard, through a variety of reports, and can be automatically uploaded into 3rd party prevention solutions dramatically improving incident response. Elements of the BOTsink - Physical, virtual and cloud engagement servers provide the threat detection engine, a multi-dimensional correlation engine, and the analysis engine that allows the attack sequence to safely play out, allows viewing of lateral movement and can open communications with the Command and Control to better understand the attacker tools, methodologies, and intent. - Decoys based on a wide variety of operating systems and services, which can also be golden image customized to match a customers production environment. - Server and end-point deception lures combined with other deception techniques are used to deceive an attacker into engaging with the BOTsink system for detection. - Central Manager provides global deployment and management of BOTsink devices and the aggregation of threat intelligence for all types of BOTsink devices. Environments supported - User networks, data centers, AWS, VMWare, SCADA - Endpoint deceptions for Mac and PC
    • developer: Attivo Networks, Inc.
    • documents: frozendict({'cert': [frozendict({'href': 'https://sertit.no/getfile.php/135169-1607953178/SERTIT/Sertifikater/2017/84/20170213%20S-084%20C%20Attivo.pdf'})], 'target': [frozendict({'href': 'https://sertit.no/getfile.php/135172-1607953180/SERTIT/Sertifikater/2017/84/ST%20Attivo%20Networks%20-%20Botsink%20Solution%20v.1.3%20-%20Final_Release.pdf'})], 'report': [frozendict({'href': 'https://sertit.no/getfile.php/135175-1607953183/SERTIT/Sertifikater/2017/84/20170201%20S-084%20CRv1.0%20Attivo.pdf'})]})
    • evaluation_facility: Advanced Data Security
    • level: EAL 2, ALC_FLR.1
    • mutual_recognition: CCRA
    • product: BOTsink appliances: Model 3200, Model 5100; vBOTsink for Vmware Version 3.3, ACM appliance Version 200; Software: ACM Version 3.3, BOTsink and Endpoint Version 3.3
  • product: Attivo BotSink Solution
  • url: https://sertit.no/certified-products/product-archive/attivo-botsink-solution
pdf_data/report_filename CRP267 v1.0.pdf 20170201 S-084 CRv1.0 Attivo.pdf
pdf_data/report_keywords/cc_cert_id
  • UK:
    • CRP262: 2
    • CRP267: 1
  • NO:
    • SERTIT-084: 16
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL2: 3
    • EAL2 augmented: 2
  • EAL:
    • EAL 2: 17
    • EAL 2 augmented: 16
    • EAL1: 1
    • EAL2: 3
    • EAL7: 1
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR.2: 3
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR: 1
    • ALC_FLR.1: 18
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/report_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 1
    • FAU_GEN.2: 1
  • FCS:
    • FCS_CKM.1: 1
    • FCS_CKM.4: 1
    • FCS_COP.1: 1
  • FDP:
    • FDP_ACC.1: 1
    • FDP_ACF.1: 1
    • FDP_IFC.1: 1
    • FDP_IFF.1: 1
  • FIA:
    • FIA_ATD.1: 1
    • FIA_UAU.1: 1
    • FIA_UID.1: 1
  • FMT:
    • FMT_MSA.1: 1
    • FMT_MSA.3: 1
    • FMT_MTD.1: 1
    • FMT_SMF.1: 1
    • FMT_SMR.2: 1
  • FPT:
    • FPT_ITT.1: 1
    • FPT_PHP.1: 1
    • FPT_STM.1: 1
    • FPT_TST.1: 1
  • FRU:
    • FRU_RSA_EXT.1: 1
  • FTA:
    • FTA_SSL.3: 1
    • FTA_TAB.1: 1
  • FTP:
    • FTP_TRP.1: 1
pdf_data/report_keywords/eval_facility
  • ADS:
    • Advanced Data Security: 1
pdf_data/report_keywords/hash_function
  • MD:
    • MD5:
      • MD5: 4
pdf_data/report_keywords/crypto_protocol
  • SSH:
    • SSH: 2
  • TLS:
    • SSL:
      • SSL: 7
  • VPN:
    • VPN: 8
pdf_data/report_keywords/standard_id
  • CC:
    • CCMB-2009-07-001: 1
    • CCMB-2009-07-002: 1
    • CCMB-2009-07-003: 1
    • CCMB-2009-07-004: 1
  • CC:
    • CCMB-2012-09-001: 1
    • CCMB-2012-09-002: 1
    • CCMB-2012-09-003: 1
    • CCMB-2012-09-004: 1
  • ICAO:
    • ICAO: 1
  • ISO:
    • ISO/IEC 15408: 2
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • below. March 2012 Issue 1.0 Page 11 of 23 Figure 1 TOE Configuration 3 Layer 3 routing (L3 mode) is out of scope as this enables IP forwarding, allowing traffic to be routed according to static routes in the: 1
    • out of scope: 1
pdf_data/report_metadata
  • /Author: Mike Brown, Nigel Whittaker-Axon, Bhavin Desai
  • /Company: Certification Body, CESG
  • /CreationDate: D:20120315141538Z
  • /Creator: Acrobat PDFMaker 8.1 for Word
  • /ModDate: D:20120315141627Z
  • /Producer: Acrobat Distiller 8.1.0 (Windows)
  • /SourceModified: D:20120315141356
  • /Title: Certification Report template v3.0
  • pdf_file_size_bytes: 467310
  • pdf_hyperlinks: http://support.citrix.com/, https://www.citrix.com/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 23
  • /AAPL:Keywords: ['ugradert']
  • /Author: Kjaertan
  • /CreationDate: D:20170213101642Z00'00'
  • /Creator: Microsoft® Word 2010
  • /Keywords: ugradert
  • /ModDate: D:20170213101642Z00'00'
  • /Producer: Mac OS X 10.12.3 Quartz PDFContext
  • /Title: tittel
  • pdf_file_size_bytes: 790748
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 16
pdf_data/st_filename ST267 v1.0.pdf ST Attivo Networks - Botsink Solution v.1.3 - Final_Release.pdf
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL2: 5
    • EAL2 augmented: 2
  • EAL:
    • EAL2: 5
    • EAL2 augmented: 4
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_TDS.1: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
    • ALC_FLR.2: 6
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 2
  • ADV:
    • ADV_ARC.1: 2
    • ADV_FSP.2: 2
    • ADV_TDS.1: 2
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 3
    • ALC_CMS.2: 2
    • ALC_DEL.1: 2
    • ALC_FLR.1: 7
  • ASE:
    • ASE_CCL: 2
    • ASE_CCL.1: 1
    • ASE_ECD: 2
    • ASE_ECD.1: 1
    • ASE_INT: 2
    • ASE_INT.1: 1
    • ASE_OBJ: 2
    • ASE_OBJ.2: 1
    • ASE_REQ: 2
    • ASE_REQ.2: 1
    • ASE_SPD: 2
    • ASE_SPD.1: 1
    • ASE_TSS: 2
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN.1: 2
    • ATE_IND.2: 2
  • AVA:
    • AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_GEN.1: 11
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_SAR.1: 9
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.3: 5
    • FAU_SAR.3.1: 1
    • FAU_STG.1: 5
    • FAU_STG.1.1: 1
    • FAU_STG.1.2: 1
  • FDP:
    • FDP_ACC: 15
    • FDP_ACC.1: 8
    • FDP_ACF: 16
    • FDP_ACF.1: 13
    • FDP_IFC: 22
    • FDP_IFC.1: 10
    • FDP_IFF: 22
    • FDP_IFF.1: 21
  • FIA:
    • FIA_UAU.1: 1
    • FIA_UAU.2: 10
    • FIA_UAU.2.1: 1
    • FIA_UID.1: 6
    • FIA_UID.2: 11
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MOF.1: 6
    • FMT_MOF.1.1: 1
    • FMT_MSA: 32
    • FMT_MSA.1: 20
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 21
    • FMT_MTD.1: 7
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 14
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 24
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 9
    • FPT_STM.1.1: 1
  • FAU:
    • FAU_GEN.1: 11
    • FAU_GEN.1.1: 1
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 6
    • FAU_GEN.2.1: 1
  • FCS:
    • FCS_CKM.1: 14
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 2
    • FCS_CKM.4: 10
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 13
    • FCS_COP.1.1: 1
  • FDP:
    • FDP_ACC.1: 13
    • FDP_ACC.1.1: 1
    • FDP_ACF.1: 8
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 13
    • FDP_IFC.1.1: 1
    • FDP_IFF.1: 8
    • FDP_IFF.1.1: 2
    • FDP_IFF.1.2: 1
    • FDP_IFF.1.3: 1
    • FDP_IFF.1.4: 1
    • FDP_IFF.1.5: 1
    • FDP_ITC.1: 4
    • FDP_ITC.2: 4
  • FIA:
    • FIA_ATD.1: 10
    • FIA_ATD.1.1: 1
    • FIA_UAU.1: 6
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UID.1: 15
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
  • FMT:
    • FMT_MSA.1: 12
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 11
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_MTD.1: 11
    • FMT_MTD.1.1: 1
    • FMT_SMF.1: 10
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 9
    • FMT_SMR.2: 12
    • FMT_SMR.2.1: 1
    • FMT_SMR.2.2: 1
    • FMT_SMR.2.3: 1
  • FPT:
    • FPT_ITT.1: 9
    • FPT_ITT.1.1: 1
    • FPT_PHP.1: 6
    • FPT_PHP.1.1: 1
    • FPT_PHP.1.2: 1
    • FPT_STM.1: 12
    • FPT_STM.1.1: 1
    • FPT_TST.1: 6
    • FPT_TST.1.1: 1
    • FPT_TST.1.2: 1
    • FPT_TST.1.3: 1
  • FRU:
    • FRU_RSA_EXT.1: 11
    • FRU_RSA_EXT.1.1: 1
  • FTA:
    • FTA_SSL.3: 9
    • FTA_SSL.3.1: 1
    • FTA_TAB.1: 6
    • FTA_TAB.1.1: 1
  • FTP:
    • FTP_TRP.1: 9
    • FTP_TRP.1.1: 1
    • FTP_TRP.1.2: 1
    • FTP_TRP.1.3: 1
pdf_data/st_keywords/cc_claims
  • A:
    • A.NO_GENERAL_: 1
    • A.NO_GENERAL_PURPOSE: 3
    • A.PHYSICAL: 2
    • A.TRUSTED_ADMIN: 4
  • O:
    • O.ACCESS: 10
    • O.AUDIT: 7
    • O.AUTH_COMM: 6
    • O.CHANGE_: 4
    • O.CHANGE_MANAGEMENT: 1
    • O.CRYPTO-: 2
    • O.CRYPTOGRAPHY: 6
    • O.DISPLAY_: 2
    • O.DISPLAY_BANNER: 2
    • O.MANAGE: 11
    • O.MEDIATE: 5
    • O.NETWORK_: 3
    • O.NETWORK_FILTERING: 2
    • O.REPLAY_: 3
    • O.REPLAY_DETECTION: 2
    • O.RESOURCE: 5
    • O.SELF_: 2
    • O.SELF_PROTECTION: 6
    • O.SOUND_: 2
    • O.SOUND_DESIGN: 3
    • O.THOROUGH_: 4
    • O.THOROUGH_FUNCTIONAL_TESTING: 19
    • O.TIME_: 1
    • O.TIME_STAMPS: 4
    • O.VERIFIABLE_: 2
    • O.VERIFIABLE_UPD: 1
    • O.VERIFIABLE_UPDATES: 1
  • OE:
    • OE.CRYPT-: 1
    • OE.CRYPTANALYTIC: 2
    • OE.NO_: 1
    • OE.NO_GENERAL_PURPOSE: 2
    • OE.PHYSICAL: 4
    • OE.TRUSTED_: 1
    • OE.TRUSTED_ADMIN: 8
pdf_data/st_keywords/vendor
  • Microsoft:
    • Microsoft: 1
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 3
  • DES:
    • 3DES:
      • 3DES: 2
  • constructions:
    • MAC:
      • HMAC: 2
      • HMAC-SHA-256: 2
      • HMAC-SHA-384: 2
      • HMAC-SHA-512: 2
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECDH:
      • ECDH: 2
    • ECDSA:
      • ECDSA: 2
  • FF:
    • DH:
      • DH: 2
    • DSA:
      • DSA: 2
  • RSA:
    • RSA 2048: 3
pdf_data/st_keywords/hash_function
  • SHA:
    • SHA1:
      • SHA-1: 2
    • SHA2:
      • SHA-256: 2
      • SHA-384: 2
      • SHA-512: 2
pdf_data/st_keywords/crypto_scheme
  • KA:
    • Key Agreement: 3
  • MAC:
    • MAC: 2
pdf_data/st_keywords/crypto_protocol
  • SSH:
    • SSH: 3
  • TLS:
    • SSL:
      • SSL: 20
  • VPN:
    • VPN: 66
  • SSH:
    • SSH: 15
  • TLS:
    • TLS:
      • TLS: 13
      • TLS 1.2: 2
pdf_data/st_keywords/side_channel_analysis
  • FI:
    • physical tampering: 3
  • FI:
    • physical tampering: 4
pdf_data/st_keywords/standard_id
  • CC:
    • CCMB-2009-07-001: 1
    • CCMB-2009-07-002: 1
    • CCMB-2009-07-003: 1
    • CCMB-2009-07-004: 1
  • FIPS:
    • FIPS 140-2: 2
    • FIPS140: 1
  • FIPS:
    • FIPS 140-2: 7
    • FIPS PUB 140-2: 2
    • FIPS PUB 180-4: 2
    • FIPS PUB 186-4: 10
    • FIPS PUB 197: 2
    • FIPS PUB 198-1: 2
    • FIPS PUB 46-3: 2
  • NIST:
    • NIST SP 800-135: 4
    • NIST SP 800-90A: 6
    • SP 800-135: 2
pdf_data/st_metadata
  • /Author: Tony Boswell
  • /CreationDate: D:20120222221755
  • /Creator: Microsoft® Office Word 2007
  • /ModDate: D:20120222221755
  • /Producer: Microsoft® Office Word 2007
  • pdf_file_size_bytes: 869566
  • pdf_hyperlinks: http://www.commoncriteriaportal.org/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 55
  • /Author: Admin
  • /CreationDate: D:20170212153216-08'00'
  • /Creator: PScript5.dll Version 5.2.2
  • /ModDate: D:20170212153216-08'00'
  • /Producer: GPL Ghostscript 8.64
  • /Title: Microsoft Word - ST Attivo Networks - Botsink Solution v.1.3 - Final_Release.docx
  • pdf_file_size_bytes: 792275
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 43
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different