Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5456

Details

Module Name
Cisco Firepower Threat Defense on 4K/9K Cryptographic Module
Standard
FIPS 140-3
Status
Active
Sunset Date
7/30/2031
Overall Level
1
Caveat
When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
  • Roles, services, and authentication: Level 3
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
MultiChipEmbed
Description
Cisco Firepower Threat Defense on 4K/9K Cryptographic Module is an integrated network security system providing enterprise-class firewall with a comprehensive range of next-generation network security services, intrusion prevention system (IPS), content security and secure unified communications, HTTPS/TLSv1.2, SSHv2, IPsec/IKEv2, SNMPv3 and Cryptographic Cipher Suite B.
Approved Algorithms
AES-CBC
A4446
AES-CBC
C1026
AES-GCM
A4446
AES-GCM
C1026
Counter DRBG
A4446
ECDSA KeyGen (FIPS186-4)
A4446
ECDSA SigGen (FIPS186-4)
A4446
ECDSA SigVer (FIPS186-4)
A4446
HMAC-SHA-1
A4446
HMAC-SHA-1
C1026
HMAC-SHA2-224
A4446
HMAC-SHA2-256
A4446
HMAC-SHA2-256
C1026
HMAC-SHA2-384
A4446
HMAC-SHA2-384
C1026
HMAC-SHA2-512
A4446
HMAC-SHA2-512
C1026
KAS-ECC-SSC Sp800-56Ar3
A4446
KAS-FFC-SSC Sp800-56Ar3
A4446
KDF IKEv2
A4446
KDF SNMP
A4446
KDF SSH
A4446
RSA KeyGen (FIPS186-4)
A4446
RSA SigGen (FIPS186-4)
A4446
RSA SigVer (FIPS186-4)
A4446
Safe Primes Key Generation
A4446
SHA-1
A4446
SHA-1
C1026
SHA2-224
A4446
SHA2-256
A4446
SHA2-256
C1026
SHA2-384
A4446
SHA2-384
C1026
SHA2-512
A4446
SHA2-512
C1026
TLS v1.2 KDF RFC7627
A4446

Vendor

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

Global Certification Team
[email protected]
Phone: 800-553-6387

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
7/31/2026 Initial Gossamer Security Solutions