Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #4867

Details

Module Name
Forcepoint Next Generation Firewall
Standard
FIPS 140-3
Status
Active
Sunset Date
11/5/2029
Overall Level
2
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals ACFIPS3 Forcepoint NGFW FIPS Kit installed as indicated in the Security Policy
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
  • Documentation requirements: N/A
  • Cryptographic module security policy: N/A
Module Type
Hardware
Embodiment
Multi-Chip Stand Alone
Description
The NGFW appliances are high-performance network security appliances that add a broad range of built-in security features, including VPN, IPS, anti-evasion, TLS inspection, SD-WAN, and mission-critical application proxies, to a traditional firewall and provides end-to-end protection across the entire enterprise network.
Tested Configuration(s)
  • N/A
Approved Algorithms
AES-CBC
A2155
AES-CBC
A2166
AES-CFB128
A2209
AES-ECB
A2155
AES-ECB
A2209
AES-GCM
A2155
AES-GCM
A2166
AES-KWP
A2155
Counter DRBG
A2155
ECDSA KeyGen (FIPS186-4)
A2155
ECDSA KeyVer (FIPS186-4)
A2155
ECDSA SigGen (FIPS186-4)
A2155
ECDSA SigVer (FIPS186-4)
A2155
HMAC-SHA-1
A2155
HMAC-SHA-1
A2166
HMAC-SHA2-224
A2155
HMAC-SHA2-224
A2166
HMAC-SHA2-256
A2155
HMAC-SHA2-256
A2166
HMAC-SHA2-384
A2155
HMAC-SHA2-384
A2166
HMAC-SHA2-512
A2155
HMAC-SHA2-512
A2166
KAS-ECC-SSC Sp800-56Ar3
A2155
KAS-FFC-SSC Sp800-56Ar3
A2155
KDF IKEv1
A2155
KDF IKEv2
A2155
KDF SP800-108
A2209
PBKDF
A2209
RSA KeyGen (FIPS186-4)
A2155
RSA SigGen (FIPS186-4)
A2155
RSA SigVer (FIPS186-4)
A2155
Safe Primes Key Generation
A2155
Safe Primes Key Verification
A2155
SHA-1
A2155
SHA-1
A2166
SHA2-224
A2155
SHA2-224
A2166
SHA2-256
A2155
SHA2-256
A2166
SHA2-384
A2155
SHA2-384
A2166
SHA2-512
A2155
SHA2-512
A2166
SHA3-256
A2167
TLS v1.2 KDF RFC7627
A2155
Hardware Versions
[2201, 2205, 2210, 3401 and 3410] with Forcepoint NGFW FIPS Kit ACFIPS3
Firmware Versions
6.10.3.26158

Vendor

Forcepoint
10900-A Stonelake Blvd, Ste. 350
Austin, TX 78759
USA

Jorma Levomaki
legal@forcepoint.com
Phone: 858-320-8000

Related Files

Security Policy

Validation History

Date Type Lab
11/6/2024 Initial LEIDOS CSTL