Module Name
Network Security Platform Sensor NS3100, NS3200, NS5100 and NS5200
Historical Reason
SP 800-56Arev3 transition
Caveat
When operated with the tamper evident seals installed as indicated in the Security Policy
Security Level Exceptions
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Network Security Platform products (formerly known as IntruShield) are Intrusion Prevention Systems (IPS) that protect network infrastructures and endpoints from intrusions such as zero-day, DoS, spyware, VoIP, botnet, malware, phishing, and encrypted attacks with highly accurate, enterprise-class risk-aware intrusion prevention. The Network Security Management system manages the sensor deployments and permits the customer to receive real-time network status updates and alerts, implement customized security policies and incident response plans, and perform forensic analysis of attacks.
Approved Algorithms
|
|
AES |
Cert. #4820 |
CKG |
vendor affirmed |
CVL |
Certs. #1441 and #1526 |
DRBG |
Cert. #1679 |
HMAC |
Cert. #3221 |
KTS |
AES Cert. #4820 and HMAC Cert. #3221; key establishment methodology provides 128 or 256 bits of encryption strength |
RSA |
Certs. #2638 and #2639 |
SHS |
Certs. #3960 and #3962 |
Allowed Algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Hardware Versions
P/Ns IPS-NS3100 Version 1.00, IPS-NS3200 Version 1.00, IPS-NS5100 Version 1.00 and IPS-NS5200 Version 1.00; FIPS Kit P/N IAC-FIPS-KT2
Firmware Versions
9.1.17.2