Cryptographic Module Validation Program CMVP

Certificate #3677

Details

Module Name
Juniper Networks vSRX 3.0 Virtual Firewall
Standard
FIPS 140-2
Status
Active
Sunset Date
7/6/2025
Validation Dates
07/07/2020
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The vSRX Virtual Firewall delivers a complete virtual firewall solution, including advanced security, robust networking, and automated virtual machine life cycle management capabilities for service providers and enterprises. vSRX empowers security professionals to deploy and scale firewall protection in highly dynamic environments.
Tested Configuration(s)
  • and Junos OS 19.2R1 on VMware ESXi 6.5 running on a PacStar 451 Server with Intel Corei5
  • Junos OS 19.2R1 on VMware ESXi 6.5 running on a HP ProLiant DL380 Gen9 Server with Intel Xeon E5
  • Junos OS 19.2R1 on VMware ESXi 6.5 running on a PacStar 451 Server with Intel Xeon D
FIPS Algorithms
AES Certs. #C936, #C937 and #C939
CVL Certs. #C935 and #C939
DRBG Certs. #C932, #C937 and #C939
ECDSA Certs. #C937 and #C939
HMAC Certs. #C932, #C934, #C936, #C937 and #C939
KAS-SSC vendor affirmed
KTS AES Certs. #C937 and #C939 and HMAC Certs. #C937 and #C939; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS Triple-DES Certs. #C937 and #C939 and HMAC Certs. #C937 and #C939; key establishment methodology provides 112 bits of encryption strength
RSA Certs. #C937 and #C939
SHS Certs. #C932, #C934, #C936, #C937 and #C939
Triple-DES Certs. #C936, #C937 and #C939
Allowed Algorithms
NDRNG
Software Versions
Junos OS 19.2R1

Vendor

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, CA 94089
USA

Bill Shelton
bshelton@juniper.net
Phone: 408-745-2000
Fax: 408-745-2100
Tracy Pham
tracyp@juniper.net
Phone: 408-745-2000
Fax: 408-745-2100

Lab

ACUMEN SECURITY, LLC
NVLAP Code: 201029-0