U.S. flag   An official website of the United States government

Cryptographic Module Validation Program CMVP

Certificate #1478

Details

Module Name
Juniper Networks SRX100, SRX210, SRX240 and SRX650 Services Gateways
Standard
FIPS 140-2
Status
Historical
 Historical Reason
RNG SP800-131A Revision 1 Transition
Validation Dates
01/05/2011;01/20/2011;12/11/2013
Overall Level
2
Caveat
The tamper evident seals and security devices installed as indicated in the Security Policy
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • EMI/EMC: Level 3
  • Design Assurance: Level 3
Module Type
Hardware
Embodiment
Multi-chip standalone
Description
Juniper Networks SRX100, SRX210, SRX240 and SRX650 Services Gateways are secure routers that provide essential capabilities that connect, secure, and manage work force locations. By consolidating fast, highly available switching, routing, security, and applications capabilities in a single device, enterprises can economically deliver new services, safe connectivity, and a satisfying end user experience. Supports Firewall, IPsec VPN and IPS.
FIPS Algorithms
AES Certs. #1362 and #1373
DSA Cert. #440
HMAC Certs. #798 and #806
RNG Cert. #748
RSA Cert. #662
SHS Certs. #1242 and #1255
Triple-DES Certs. #937 and #948
Other Algorithms
RSA (key wrapping; key establishment methodology provides 80 bits of encryption strength; non-compliant); Diffie-Hellman (key agreement; key establishment methodology provides 90 bits of encryption strength; non-compliant); MD5
Hardware Versions
SRX100B, SRX100H, SRX210B, SRX210H, SRX240B, SRX240H and SRX650-BASE-SRE6-645AP with JNPR-FIPS-TAMPER-LBLS
Firmware Versions
10.0R4

Vendor

Juniper Networks, Inc.
1194 Norht Mathilda Ave
Sunnyvale, CA 94089
USA

Claudio Baserga
cbaserga@juniper.net
Phone: 408-936-0961

Lab

ICSA
NVLAP Code: 200697-0