 |
We followed the Vulnerability Assessment standards outlined in the CEM and conducted thorough testing of the TOE.
But we discovered that several testing items did not fully align with the functionalities mentioned in its User's guide.
T.UNTRUSTED_COMMUNICATION_CHANNELS
The test aimed to confirm the TOE's ability to use highly reliable protocols and certificates.
The TOE uses the highly reliable TLSv1.3 protocol, browsers did not trust the certificates signed by Zyxel, resulting in a test failure.
T.DATA_INTEGRITY
The test was designed to evaluate the TOE's Sandbox functionality, which isolates unknown files and detects new malware to enhance network security.
During testing, the TOE failed to detect and block malicious files, leading to a test failure.
T.MALICIOUS_TRAFFIC
We simulated a DoS attack to evaluate the TOE's firewall functionality for blocking malicious traffic and DoS attacks.
The TOE encountered issues during a DoS attack and did not provide the expected protection, resulting in a test failure.
|
IEEE/ICACT20240272 Slide.17
[Big Slide]