NDPP

A Dell SonicWALL network security appliance can be enabled to be compliant with Network Device Protection Profile (NDPP), but certain firewall configurations are not allowed or are required.

NOTE: NDPP is a part of Common Criteria (CC) certification. However, NDPP in SonicOS is not currently certified.

The security objectives for a device that claims compliance to a Protection Profile are defined as follows:

Compliant TOEs (Targets Of Evaluation) will provide security functionality that address threats to the TOE and implement policies that are imposed by law or regulation. The security functionality provided includes protected communications to and between elements of the TOE; administrative access to the TOE and its configuration capabilities; system monitoring for detection of security relevant events; control of resource availability; and the ability to verify the source of updates to the TOE.

You enable NDPP by selecting the Enable NDPP Mode option on the System > Settings page. Once you do this, a popup window is displayed with the NDPP mode setting compliance checklist. The checklist displays every setting in your current SonicOS configuration that violates NDPP compliance, so that you can change these settings. You will need to navigate around the SonicOS management interface to make the changes. The checklist for an appliance with factory default settings is shown in the following procedure.

To enable NDPP and see a list of which of your current configurations are not allowed or are not present:

NOTE: The Enable NDPP Mode checkbox cannot be enabled at the same time as the Enable FIPS Mode checkbox, which is also on the System > Settings page.

1	Go to the Systems > Settings page.

2	Scroll to the bottom to the FIPS section.

3	Select the Enable NDPP Mode option. The NDPP Mode Verification window appears with a list of your required and not allowed configurations.

4	If your SonicWALL

•	Complies with the checklist, go to Step 5.

•	Does not comply with the checklist, manually change or disable settings to be compliant with NDPP mode requirement.

TIP: Leave the checklist window open while you make the configuration changes. If you click OK before all required changes are complete, the Enable NDPP Mode checkbox is cleared automatically upon closing the checklist window. Select the checkbox again to see what configuration changes are still needed for NDPP compliance.

5	Click OK or Cancel.