HP 3PAR InForm OS Common Criteria Administrator's Reference (QL226-96586, October 2012)

11 Evaluated Configuration
 The host interface connections (SAN, iSCSI, LAN) are assumed to be private networks
and carry no general network traffic. While difficult, access by untrustworthy entities,
or hosts, could lead to the spoofing of WWNs or iSCSI names on these network
segments. This could result in unintended access to storage resources by those
untrustworthy entities. It is therefore assumed that administrators allow only trusted
hosts access to these connections and that the hosts themselves are protected from
access by untrustworthy entities.
 The node console ports (also known as the maintenance terminal ports) are
maintenance only connections and are not to be used by system administrators.
Administrative session management
The HP 3PAR Storage System supports multiple simultaneous administrative sessions.
Though individual administrative sessions are tracked, there is no inherent protection
against multiple administrators that attempt to edit system components at the same time. It
is expected that administrators are cognizant of ongoing administrative activities. Multiple
equally-authorized administrators, with identical domain membership, can interfere with
each other if there is no coordination of their activities. Customers can choose to
segregate which component(s) can be acted on by which administrator(s).