Cryptographic Module Validation Program CMVP

Certificate #2567

Details

Module Name
IBM Security XGS 3100, XGS 4100, XGS 5100, and XGS 7100
Standard
FIPS 140-2
Status
Active
Sunset Date
12/19/2021
Validation Dates
02/19/2016;12/20/2016
Overall Level
2
Caveat
When installed, initialized and configured as specified in the Security Policy Section 3. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Mitigation of Other Attacks: N/A
Module Type
Hardware
Embodiment
Multi-Chip Stand Alone
Description
The Network Intrusion Prevention System (IPS) automatically blocks malicious attacks while preserving network bandwidth and availability. The appliances are purpose-built, Layer 2 network security appliances that you can deploy either at the gateway or the network to block intrusion attempts, denial of service (DoS) attacks, malicious code, backdoors, spyware, peer-to-peer applications, and a growing list of threats without requiring extensive network reconfiguration. The XGS 3100, XGS 4100, XGS 5100, and XGS 7100 can be securely managed via SiteProtector, which is a central management console
Tested Configuration(s)
  • N/A
FIPS Algorithms
AES Certs. #3280, #3282, #3283, #3284, #3307, #3308, #3309 and #3310
CVL Certs. #463, #465, #466 and #467
DRBG Certs. #738, #740, #741, #742, #756, #757, #758 and #759
DSA Certs. #937, #939, #940 and #941
ECDSA Certs. #633, #635, #636, #637, #640, #641, #642 and #643
HMAC Certs. #2077, #2079, #2080, #2081, #2099, #2100, #2101 and #2102
RSA Certs. #1677, #1679, #1680, #1681, #1691, #1692, #1693 and #1694
SHS Certs. #2718, #2720, #2721, #2722, #2740, #2741, #2742 and #2743
Triple-DES Certs. #1867, #1869, #1870, #1871, #1883, #1884, #1885 and #1886
Other Algorithms
RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides 112 or 128 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG
Hardware Versions
XGS 3100, XGS 4100, XGS 5100 and XGS 7100; FIPS-LABELS: FIPS 140 tamper evidence labels P/N 00VM255
Firmware Versions
5.3.1 and 5.3.3

Vendor

IBM Security
6303 Barfield Road
Atlanta, GA 30328
USA

Ferrell Moultrie
fmoultrie@us.ibm.com
Phone: (404) 348-9293
Fax: N/A

Lab

COACT Inc. CAFE Laboratory
NVLAP Code: 200416-0