The Common Criteria, also known as ISO standard 15408, addresses theprotection of assets from unauthorized disclosure, modification, or loss ofuse arising from both intentional and unintentional causes. It bothdefines a set of security functionality requirements for IT hardware,software, and firmware products, and, through a rigorous evaluationprocess, ensures that those requirements have been satisfied. Users turn tothe Common Criteria as a guide for the procurement of IT products withsecurity functionality because certified products have validatedfunctionality meeting a well-defined set of criteria.

The FIPS 140-2 standard specifies the cryptographic security requirementsfor sensitive but unclassified information. The standard defines multiplelevels of security that correspond with the wide range of potentialapplications and environments in which such systems may be employed.

DoD Directive 8100.2 spells out policies for deploying and monitoringsecure wireless networks comprised of commercial wireless devices,services, and technologies in the DoD Global Information Grid. Among othercriteria, Directive 8100.2 requires data encryption, strong authentication,non-repudiation, personal identification, and use of the 802.11i Wi-Fisecurity standard.

"The absence of Common Criteria certification is a showstopper for Federalcustomers and other high-security vertical markets, such as finance," saidGreg Young, Research VP at Gartner, Inc. "One of the most significantbenefits of Common Criteria evaluations is that the documentationrequirements force vendors to implement strict change management andrelease controls, which can minimize -- but not eliminate -- the seriousand valid concern of vulnerabilities being introduced post-evaluation.Given this rigor, evaluated products should have fewer vulnerabilities overtime than their non-evaluated peers. However, do not assume that goodcryptography is included in a Common Criteria evaluation. FIPS 140-2 is awidely accepted and successful standard for evaluating cryptographicmodules, and ensures the correctness of cryptography."

Aruba's unified mobility solutions securely deliver networks to users byintegrating adaptive wireless LANs, identity-based security, applicationcontinuity services, and multi-vendor network management into a cohesive,high-performance system. Adaptive wireless LANs deliver follow-meconnectivity to roaming users, support standard Wi-Fi clients, and deliverhigh-speed data, toll-quality voice, and streaming video applications.Aruba's identity-based security associates policies with users instead ofports, delivering follow-me security that enhances mobility withoutcompromising security.

"Our indoor and outdoor adaptive wireless LANs have drawn considerableinterest from prospective domestic and international users with highsecurity requirements for whom FIPS 140-2 validation by itself isinsufficient," said Dave Logan, Aruba's General Manager of FederalSolutions. "These users require a combination of Common Criteriacertification, FIPS 140-2 validation, and Directive 8100.2 compliance. Withthese in hand we can bring the same mobility and efficiency benefits tohigh security users as we do to general enterprise customers. It was not asimple task to meet these requirements and we are very pleased to be thefirst wireless LAN vendor to have done so."

About Aruba Networks

People move. Networks must follow. Aruba securely delivers networks tousers, wherever they work or roam. Our unified mobility solutions includeWi-Fi networks, identity-based security, remote access and cellularservices, and centralized multi-vendor network management to enable theFollow-Me Enterprise that moves in lock-step with users:

--  Follow-Me Connectivity: Adaptive 802.11a/b/g/n Wi-Fi networks optimize    themselves to ensure that users are always within reach of mission-critical    information;--  Follow-Me Security: Identity-based security assigns access policies to    users, enforcing those policies whenever and wherever a network is    accessed;--  Follow-Me Applications: Remote access solutions and cellular network    integration ensure uninterrupted access to applications as users move;--  Follow-Me Management: Multi-vendor network management provides a    single point of control while managing both legacy and new wireless    networks from both Aruba and its competitors.    

The cost, convenience, and security benefits of our unified mobilitysolutions are fundamentally changing how and where we work. Listed on theNASDAQ and Russell 2000® Index, Aruba is based in Sunnyvale, California,and has operations throughout the Americas, Europe, Middle East, and AsiaPacific regions. To learn more, visit Aruba athttp://www.arubanetworks.com.

© 2008 Aruba Networks, Inc. AirWave®, Aruba Networks®, ArubaMobility Management System®, Bluescanner, For Wireless That Works®,Mobile Edge Architecture®, People Move. Networks Must Follow®,RFProtect, The All Wireless Workplace Is Now Open For Business, and TheMobile Edge Company® are trademarks of Aruba Networks, Inc. All rightsreserved. All other trademarks are the property of their respectiveowners.

Add to Digg Bookmark with del.icio.us Add to Newsvine