Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #3288


Module Name
Juniper Networks NFX250 Network Services Platform
FIPS 140-2
 Historical Reason
SP 800-56Arev3 transition
Overall Level
When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Multi-Chip Stand Alone
NFX250 Network Services Platform are Juniper Network’s secure, automated, software-driven customer premises equipment (CPE) devices that deliver virtualized network and security services on demand. Leveraging Network Functions Virtualization (NFV) and built on the Juniper Cloud CPE solution, NFX250 enables service providers to deploy and service chain multiple, secure, high-performance virtualized network functions (VNFs) as a single device. This automated, software-driven solution dynamically provisions new services on demand.
Tested Configuration(s)
  • N/A
Approved Algorithms
AES Cert. #5320
CKG vendor affirmed
CVL Cert. #1601
DRBG Certs. #1867 and #2054
ECDSA Cert. #1301
HMAC Certs. #3366, #3367 and #3522
KTS AES Cert. #5320 and HMAC Cert. #3367; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS Triple-DES Cert. #2606 and HMAC Cert. #3367; key establishment methodology provides 112 bits of encryption strength
SHS Certs. #4111, #4112, and #4276
Triple-DES Cert. #2606
Allowed Algorithms
EC Diffie-Hellman (CVL Certs. #1601, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG
Hardware Versions
NFX250-S1, NFX250-S2
Firmware Versions
Junos OS 17.3R2


Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, CA 94089

Bill Shelton
Phone: 571-203-1825
Tracy Pham
Phone: 408-745-2000

Validation History

Date Type Lab
9/19/2018 Initial ACUMEN SECURITY, LLC