U.S. flag   An official website of the United States government

Cryptographic Module Validation Program CMVP

Certificate #1552

Details

Module Name
Check Point IP Appliance
Standard
FIPS 140-2
Status
Historical
 Historical Reason
RNG SP800-131A Revision 1 Transition
Validation Dates
06/07/2011;10/04/2011
Overall Level
2
Caveat
When operated in FIPS mode and tamper evident seals installed as indicated in the Security Policy
Security Level Exceptions
  • Design Assurance: Level 3
Module Type
Hardware
Embodiment
Multi-chip standalone
Description
The Nokia VPN Applicances are full-featured enterprise systems designed for small to medium enterprises, with Service Provider flexibility and rapid serviceability option in a single rack space. When combined with Check Point VPN-1 these platforms provide reliable, easy to manage distributed security and access.
FIPS Algorithms
AES Certs. #709 and #91
DSA Cert. #271
HMAC Certs. #384, #385, #499 and #203
RNG Certs. #417 and #418
RSA Certs. #332 and #333
SHS Certs. #734, #735, #883 and #500
Triple-DES Certs. #637, #638, #729 and #204
Other Algorithms
CAST; DES; HMAC MD5; MD5; Arcfour; Twofish; Blowfish; Diffie-Hellman (key agreement, key establishment methodology provides between 112 bits and 128 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 bits and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Triple-DES (K3 mode; non-compliant)
Hardware Versions
IP1280 (CPAP-IP1285-D-GFIP [Nokia NBB1270000], CPIP-A-4-1C, CPIP-A-D80G-CA, CPIP-A-CA-12-24 and N431174001), IP2450 (CPAP-IP2455-D-GFIP [Nokia NBB3450000], CPIP-A-4-1C, CPIP-A-D80G-CA, CPIP-A-CA-12-24 and N431174001) and IP2455 (CPAP-IP2455-D- GFIP, CPIP-A-4-1C, CPIP-A-D80G-CA, CPIP-A-CA-12-24 and N431174001)
Firmware Versions
IPSO v4.2 with Check Point VPN-1 NGX R65 with hot fix HFA 30

Vendor

Check Point Software Technologies Ltd.
Check Point Software Technologies Ltd.
9900 Belward Campus Drive
Suite 250
Rockville, MD 20850
USA

David Ambrose
product_certifications@checkpoint.com
Phone: 703-628-2935
Malcolm Levy
product_certifications@checkpoint.com
Phone: +972-37534561

Lab

CEAL
NVLAP Code: 200002-0