Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4138

Details

Module Name
NETSCOUT FIPS Object Module
Standard
FIPS 140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Roles, Services, and Authentication: Level 2
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The NETSCOUT FIPS Object Module provides cryptographic functionality to NETSCOUT’s series of applications.
Tested Configuration(s)
  • ArbOS 7.0 running on a NETSCOUT APS 2600 Series {APS 2600} with an Intel® Xeon® E5-2608L v3 with PAA
  • ArbOS 7.0 running on a NETSCOUT APS 2600 Series {APS 2600} with an Intel® Xeon® E5-2608L v3 without PAA
  • ArbOS 7.0 running on a NETSCOUT APS 2800 Series {APS 2800l} with an Intel® Xeon® E5-2648L v3 with PAA
  • ArbOS 7.0 running on a NETSCOUT APS 2800 Series {APS 2800l} with an Intel® Xeon® E5-2648L v3 without PAA
  • ArbOS 7.2 running on a NETSCOUT 2800 Series {APS 2800, AED 2800, TMS 2800, SP 7000, AEM 7000} with an Intel® Xeon® E5-2648L v3 with PAA
  • ArbOS 7.2 running on a NETSCOUT 2800 Series {APS 2800, AED 2800, TMS 2800, SP 7000, AEM 7000} with an Intel® Xeon® E5-2648L v3 without PAA
  • ArbOS 7.2 running on a NETSCOUT 7500 Series {SP 7500, AEM 8000} with an Intel® Xeon® Gold 5218T without PAA
  • ArbOS 7.2 running on a NETSCOUT 7500 Series {SP 7500, AEM 8000} with an Intel® Xeon® Gold 5218T with PAA
  • ArbOS 7.3 running on a NETSCOUT 2600 Series {APS 2600, AED 2600, TMS 2600} with an Intel® Xeon® E5-2608L v3 with PAA
  • ArbOS 7.3 running on a NETSCOUT 2600 Series {APS 2600, AED 2600, TMS 2600} with an Intel® Xeon® E5-2608L v3 without PAA
  • ArbOS 7.3 running on a NETSCOUT 8100 Series {AED 8100, TMS 8100} with an Intel® Xeon® Silver 4210T with PAA
  • ArbOS 7.3 running on a NETSCOUT 8100 Series {AED 8100, TMS 8100} with an Intel® Xeon® Silver 4210T without PAA
  • ArbOS 7.3 running on a NETSCOUT HD1000 Series {AED HD1000, TMS HD1000} with an Intel® Xeon® D-1548 with PAA
  • ArbOS 7.3 running on a NETSCOUT HD1000 Series {AED HD1000, TMS HD1000} with an Intel® Xeon® D-1548 without PAA (single-user mode)
  • Custom Linux 3.10 running on a NETSCOUT 1400 Series {1410J} with an Intel® Xeon® Silver 4110 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 1400 Series {1410J} with an Intel® Xeon® Silver 4110 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410J} with an Intel® Xeon® Silver 4110 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410J} with an Intel® Xeon® Silver 4110 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 2600 Series {2695J} with an Intel® Xeon® Gold 6126 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 2600 Series {2695J} with an Intel® Xeon® Gold 6126 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795J} with an Intel® Xeon® Gold 6126 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795J} with an Intel® Xeon® Gold 6126 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895J} with an Intel® Xeon® Gold 6152 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895J} with an Intel® Xeon® Gold 6152 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 6600 Series {6695J} with an Intel® Xeon® Gold 6126 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 6600 Series {6695J} with an Intel® Xeon® Gold 6126 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 690 Series {690J} with an Intel Atom® Processor C3955 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 690 Series {690J} with an Intel Atom® Processor C3955 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795J} with an Intel® Xeon® Gold 6126 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795J} with an Intel® Xeon® Gold 6126 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802J} with an Intel® Xeon® Gold 6152 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802J} with an Intel® Xeon® Gold 6152 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 9800 Series {9807J} with an Intel® Xeon® Gold 6152 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 9800 Series {9807J} with an Intel® Xeon® Gold 6152 without PAA
  • Custom Linux 3.10 running on a NETSCOUT 9800 Series {9895J} with an Intel® Xeon® Gold 6152 with PAA
  • Custom Linux 3.10 running on a NETSCOUT 9800 Series {9895J} with an Intel® Xeon® Gold 6152 without PAA
  • Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300D} with an Intel® Xeon® E5-2620 v3 with PAA
  • Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300D} with an Intel® Xeon® E5-2620 v3 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5000 Series {5010} with an Intel Atom® Processor C2538 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5000 Series {5010} with an Intel Atom® Processor C2538 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5000 Series {5010-16X} with an Intel Atom® Processor C2538 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5000 Series {5010-16X} with an Intel Atom® Processor C2538 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5100 Series {5100} with an Intel Atom® Processor C2538 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5100 Series {5100} with an Intel Atom® Processor C2538 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5100 Series {5110} with an Intel Atom® Processor C2538 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5100 Series {5110} with an Intel Atom® Processor C2538 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5100 Series {5120} with an Intel® Xeon® D-1518 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 5100 Series {5120} with an Intel® Xeon® D-1518 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7000 Series {7010} with an Intel Atom® Processor C2538 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7000 Series {7010} with an Intel Atom® Processor C2538 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7100 Series {7100} with an Intel Atom® Processor C2538 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7100 Series {7100} with an Intel Atom® Processor C2538 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7100 Series {7110} with an Intel Atom® Processor C2538 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7100 Series {7110} with an Intel Atom® Processor C2538 without PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7100 Series {7120} with an Intel® Xeon® D-1518 with PAA
  • Custom Linux 4.14.151 running on a NETSCOUT 7100 Series {7120} with an Intel® Xeon® D-1518 without PAA
  • Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} with an Intel® Xeon® Gold 6142 with PAA
  • Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} with an Intel® Xeon® Gold 6142 without PAA
  • Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} with an Intel® Xeon® Silver 4110 with PAA
  • Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} with an Intel® Xeon® Silver 4110 without PAA
  • Timesys Linux 3.8.13 running on a NETSCOUT 3900 Series {3900} with an NXP QorIQ® P4081 without PAA
Approved Algorithms
AES Certs. #C976, #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
CVL Certs. #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
DRBG Certs. #C976, #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
DSA Certs. #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
ECDSA Certs. #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
HMAC Certs. #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
KAS-SSC Cert. #A1882
RSA Certs. #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
SHS Certs. #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
Triple-DES Certs. #C977, #C1878, #C1879, #C1880, #C1881 and #C2144
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 270 bits of encryption strength)
Software Versions
v1.0

Vendor

NETSCOUT Systems, Inc.
310 Littleton Road
Westford, MA 01886
USA

Steve Swidrak
Stephen.Swidrak@netscout.com

Validation History

Date Type Lab
1/18/2022 Initial Lightship Security, Inc.
4/4/2023 Update Lightship Security, Inc.