Module Name
FireEye CM Series: CM-4500, CM-7500, CM-9500
Validation Dates
02/07/2018
Caveat
When operated in FIPS mode.
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
The FireEye CM series is a group of management platforms that consolidates the administration, reporting, and data sharing of the FireEye NX, EX, FX and AX series in one easy-to-deploy, network-based platform. Within the FireEye deployment, the FireEye CM enables real-time sharing of the auto-generated threat intelligence to identify and block advanced attacks targeting the organization. It also enables centralized configuration, management, and reporting of FireEye platforms.
FIPS Algorithms
AES |
Cert. #4761 |
CKG |
vendor affirmed |
CVL |
Certs. #1406 and #1407 |
DRBG |
Cert. #1638 |
DSA |
Cert. #1281 |
ECDSA |
Cert. #1193 |
HMAC |
Cert. #3172 |
KTS |
AES Cert. #4761 and HMAC Cert. #3172; key establishment methodology provides 128 or 256 bits of encryption strength |
KTS |
Triple-DES Cert. #2531 and HMAC Cert. #3172; key establishment methodology provides 112 bits of encryption strength |
RSA |
Certs. #2604 and #2605 |
SHS |
Certs. #3903 and #3904 |
Triple-DES |
Cert. #2531 |
Allowed Algorithms
Diffie-Hellman (CVL Cert. #1406 with CVL Cert. #1407, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1406 with CVL Cert. #1407, key agreement; key establishment methodology provides 128 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Hardware Versions
CM-4500, CM-7500, CM-9500