Cryptographic Module Validation Program CMVP

Certificate #2696

Details

Module Name
Juniper Networks SRX100, SRX110, SRX210, SRX220, SRX240, SRX550, and SRX650 Services Gateways
Standard
FIPS 140-2
Status
Active
Sunset Date
8/3/2021
Validation Dates
08/04/2016
Overall Level
2
Caveat
When operated in FIPS mode and with the tamper-evident seals installed as indicated in the Security Policy
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Hardware
Embodiment
Multi-Chip Stand Alone
Description
Juniper Networks SRX Series Services Gateways provide the essential capabilities necessary to connect, secure, and manage enterprise and service provider networks, from the smallest sites to the largest headquarters and data centers.
Tested Configuration(s)
  • N/A
FIPS Algorithms
AES Certs. #3650, #3656, #3657, #3658, #3659, #3660 and #3661
CVL Certs. #659 and #660
DRBG Cert. #981
DSA Certs. #1022, #1027, #1028, #1029, #1030 and #1031
ECDSA Certs. #758, #764, #765, #766, #767 and #768
HMAC Certs. #2400, #2406, #2407, #2408, #2409, #2410 and #2411
RSA Certs. #1885, #1890, #1891, #1892, #1893 and #1894
SHS Certs. #3068, #3074, #3075, #3076, #3077, #3078 and #3079
Triple-DES Certs. #2035, #2036, #2039, #2040, #2041, #2042 and #2043
Other Algorithms
Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 192 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; HMAC-SHA-1-96 (HMAC Certs. #2400, #2406, #2407, #2408, #2409, #2410 and #2411); HMAC-MD5; HMAC-MD5-96; HMAC-RIPEMD160; UMAC-128; UMAC-64; ARCFOUR; ARCFOUR128; ARCFOUR256; BLOWFISH; CAST128
Hardware Versions
P/Ns {SRX100H, SRX100H2, SRX100H-TAA, SRX110H2-VA, SRX110H2-VB, SRX110H-VA, SRX110H-VB; SRX210HE, SRX210HE2, SRX210HE2-POE, SRX210HE-POE, SRX210HE-POE-TAA, SRX210HE-TAA, SRX210H2-POE-TAA, SRX210H2-TAA; SRX220H, SRX220H2, SRX220H-POE, SRX220H2-POE; SRX240H, SRX240H2, SRX240H2-DC, SRX240H2-POE, SRX240H-DC, SRX240H-POE, SRX240H-POE-TAA, SRX240H-TAA, SRX240H2-DC-TAA, SRX240H2-POE-TAA, SRX240H2-TAA; SRX550-645AP, SRX550-645DP, SRX550-645AP-TAA, SRX550-645DP-TAA; SRX650-BASE-SRE6-645AP, SRX650-BASE-SRE6-645DP, SRX650B-SRE6-645AP-TAA} with JNPR-FIPS-TAMPER-LBLS
Firmware Versions
JUNOS-FIPS 12.1X46-D40

Vendor

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, CA 94089
USA

Mahesh Bommareddy
mbommareddy@juniper.net
Phone: 408-936-5493
Van Nguyen
vann@juniper.net
Phone: 408-936-2247

Lab

InfoGard Laboratories, Inc.
NVLAP Code: 100432-0