Module Name
Cisco Catalyst 9300 Series Switches
Historical Reason
SP 800-56Arev3 transition
Caveat
When operated in FIPS mode, installed, initialized and configured as specified in Section 3 of the Security Policy
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 2
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
The Cisco Catalyst 9300 Series Switches are stackable enterprise switching platform built for security, IoT, mobility, and cloud. The switches meet FIPS 140-2 overall Level 1 requirements as multi-chip standalone modules. The modules include cryptographic algorithms implemented in IOS-XE software as well as hardware ASIC. Advanced security feature supports MACsec encryption, hardware anchored secure boot and Secure Unique Device Identification (SUDI) support.
Allowed Algorithms
Diffie-Hellman (CVL Cert. #C462, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength);
Hardware Versions
Cisco Catalyst 9300-24T, Cisco Catalyst 9300-24P, Cisco Catalyst 9300-24U, Cisco Catalyst 9300-24UX, Cisco Catalyst 9300-48T, Cisco Catalyst 9300-48P, Cisco Catalyst 9300-48U, Cisco Catalyst 9300-48UX and Cisco Catalyst 9300-48UN
Firmware Versions
Cisco IOS-XE 16.9.2, Cisco IOS-XE 16.12 and Cisco IOS-XE 17.3
