17 Dec
2003
17 Dec
'03
11:17 p.m.
configuration can be certified as C2 compliant. The way I read the orange book, no system with a network connection can ever be C2. For that matter a system can't get C2 unless it is in an area where you can control and monitor physical access to the system.
This is incorrect -- you can have a C2 system which has a network connection. Indeed, you can get a B2 rating with a networked system, c.f. Multics. -derek