Blue Coat Systems, Inc., the technology leader in Web security and WAN optimization solutions, today announced that it has achieved certification for EAL4+ level security under the Canadian Communications Security Establishment’s (CSE) Common Criteria Evaluation and Certification Scheme (CCS) for its SGOS 6.1 operating system on its Blue Coat® ProxySG® 600, 900 and 9000-10 and 9000-20 appliances.
“The EAL4+ certification reflects Blue Coat’s strong commitment to security and the strength and quality of our products,” said Steve Daheb, chief marketing officer and senior vice president of corporate and business development, Blue Coat Systems. “By meeting or exceeding the most stringent government and military requirements, we provide every customer with the confidence of knowing they have the industry’s leading Web security.”
Common Criteria is an internationally recognized set of guidelines (ISO 15408), which define a common framework for evaluating security features and capabilities of Information Technology security products. The standard consists of several predetermined evaluation assurance levels, each one more stringent than the last. Common Criteria allows vendors to have their products tested against a chosen level by an independent third-party testing laboratory.
Common Criteria certification of security products is mandated by the U.S. government for federal purchases. The National Information Assurance Acquisition Policy, NSTISSP No. 11, requires agencies to purchase only those commercial security products which have met specified third-party assurance requirements and have been tested by an accredited national laboratory.
In order to facilitate completion of the Common Criteria certification, Blue Coat contracted with Corsec Security, Inc., a consulting firm specializing in assisting commercial vendors through the complex process of achieving FIPS 140-2 and Common Criteria government validations. Corsec Security has more than 11 years of validation experience and is one of the largest and most experienced independent validation consulting firms in the security industry.
