oe | MOTOROLA ASTRO Security Update Service Statement of Wort
2.0 Scope
Security Update Service supports the currently shipping Motorola ASTRO System Release
(SR) and strives to support 5 releases prior. Motorola reserves the right to adjust which
releases are supporied as business conditions dictate. Contact your Customer Service
Manager for the latest supported releases.
SUS is available for any L or M core system in a supported release. SUS is also available for
K cores but only for Windows PC’s such as MCC 7500 consoles.
Systems that have non-standard configurations that have not been certified by Motorola
Systems Integration and Testing (SIT) are specifically excluded from this Service unless
otherwise agreed in writing by Motorola. Service does not include pre-tested intrusion
detection system (IDS) updates for IDS solutions. Certain consoles, MOTOBRIDGE,
MARVLIS, Symbol Equipment, AirDefense Equipment, AVL, and Radio Site Security
products are also excluded. Motorola will determine, in its sole discretion, the third party
software that is supported as a part of this offering.
3.0 Motcrola has the following responsibilities:
3.1 Obtain relevant 3" party SW security updates as made available and supported
from the OEM's. This includes antivirus definition updates, OEM vendor
available/supported operating systems patches, hypervisor patches, database
patches, and selected other 3 party patches that Motorola deployed in ASTRO
system releases covered by this SUS. Motorola does not control when these
updates are released, but current release schedules are listed for reference:
McAfee Antivirus definitions— Weekly
Microsoft PC and Server OS patches — Monthly
Solaris, RHEL OS, VMware hypervisor patches — Quarterly
3.2 Each assessment will consist of no less than 36 hours of examination time io
evaluate the impact each update has on the system.
3.3 Testing of updates fo verify whether they degrade or compromise system
functionality on a dedicated ASTRO test system with standard supported
configurations.
3.4 Address any issues identified during testing to support functionality by working
with Motorola selected commercial supplier and/or Motorola product development
engineering team. If a solution for the identified issues cannot be found, the patch
will not be posted on Motcrola’s site.
3.5 Pre-test STIG recommended remediation when applicable.
3.6 Release all tested updates to Motorola's secure extranet site.
3.7 Include documentation for installation, recommended configuration changes, and
identified issues and remediation for each update release.
3.8 Include printable labels for customers who download the updates to CD's.
3.9 Notify customer of update releases by email.
Approved by Motorola Solutions LGA&C 9/18/2014 Motorola 2017
Page 4o0f5
