Citrix Virtualization Meets Common Criteria EAL 2 Security Standards

(WEB HOST INDUSTRY REVIEW) — Citrix Systems (www.citrix.com) has announced that Citrix XenServer and Citrix XenDesktop have been certified to meet Common Criteria Evaluation Assurance Level 2, an internationally recognized set of guidelines that define a common framework for evaluating security features and capabilities of IT security products.

An international standard (ISO/IEC15408) for computer security certification, Common Criteria for Information Technology Security Evaluation offers assurance that the process of specification, implementation and evaluation of a computer security product has been conducted in a rigorous and standard manner.

According to Citrix’s Friday announcement, Citrix’s XenServer and XenDesktop software, combined with already-certified XenApp, combine to create the first and only end-to-end virtualization solution certified to meet the strict security requirements of many enterprises, and government agencies, including the Department of Defense.

“The certification of XenDesktop and XenServer further demonstrates our commitment to delivering the kinds of secure virtual computing solutions that our customers demand,” Citrix public sector area vice president Tom Simmons said in a statement. “With these certifications, Citrix is now the first and only company to have a complete, end-to-end virtualization solution certified to meet the security and interoperability requirements of our federal customers, especially the Department of Defense.”

The evaluation assurance level, which ranges from 1 to 7 describes the depth and rigor of an evaluation. While higher EALs do not necessarily imply higher security, they do mean that the security level claimed has been more extensively verified.

Offering flexibility, simplicity, and security, Citrix said its virtualization solution is more attractive than ever for government agencies and companies concerned with security to adopt desktop, server and application virtualization.