Module Name

SBC Software Edition Session Border Controller

Standard

FIPS 140-2

Status

Active

Sunset Date

6/24/2023

Validation Dates

06/25/2018

Overall Level

1

Caveat

When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Security Level Exceptions

• Roles, Services, and Authentication: Level 2
• Physical Security: N/A
• Design Assurance: Level 2
• Mitigation of Other Attacks: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

The Sonus SBC Software Edition Session Border Controller (SBC SWe) is a software-based, cloud-optimized SBC architected to enable and secure real-time communications in the cloud. Starting at 25 sessions, and scaling to tens of thousands per instance, the unique architecture of the SBC SWe allows customers to define where on the performance curve their network needs to reside. The SBC SWe uses a "microservices" design to separate signaling, media, and transcoding to optimize virtual network resources. It also supports on-demand auto-scaling, with a feedback loop using Key Performance Indicator

Tested Configuration(s)

• HPE ProLiant DL380 Gen9 server with dual Intel Xeon processors running Sonus’s ConnexIP OS over a VMware ESXi 6.0 hypervisor

FIPS Algorithms

AES	Certs. #4685 and #4686
CKG	vendor affirmed
CVL	Certs. #1327 and #1380
DRBG	Cert. #1588
ECDSA	Cert. #1202
HMAC	Certs. #3100 and #3101
RSA	Cert. #2556
SHS	Certs. #3835 and #3836
Triple-DES	Certs. #2490 and #2491

Allowed Algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1327, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Software Versions

R5.1.2