Security Target, Version 3.9 March 18, 2008Nortel VPN Router v7.05 and Client Workstation v7.11 Page 37 of 67© 2008 Nortel Networks5.1.6 Class FPT: Protection of the TSFFPT_AMT.1 Abstract machine testingHierarchical to: No other components.FPT_AMT.1.1The TSF shall run a suite of tests [during initial start-up, periodically during normal operation] todemonstrate the correct operation of the security assumptions provided by the abstract machine thatunderlies the TSF.Dependencies: No dependenciesFPT_RPL.1 Replay detectionHierarchical to: No other components.FPT_RPL.1.1The TSF shall detect replay for the following entities: [the IPSec sessions].FPT_RPL.1.2The TSF shall perform [drop packets] when replay is detected.Dependencies: No dependenciesFPT_TST.1 TSF testingHierarchical to: No other components.FPT_TST.1.1The TSF shall run a suite of self tests [during initial start-up, at the conditions [when running in Normalmode]] to demonstrate the correct operation of [the TSF].FPT_TST.1.2The TSF shall provide authorised users with the capability to verify the integrity of [TSF data].FPT_TST.1.3The TSF shall provide authorised users with the capability to verify the integrity of stored TSF executablecode.Dependencies: FPT_AMT.1 Abstract machine testing