Module Name
NETSCOUT FIPS Object Module
Validation Dates
05/09/2019
Caveat
When operated in FIPS mode. This validation entry is a non-security-relevant modification to Cert. #1747
Security Level Exceptions
- Roles, Services, and Authentication: Level 2
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
This cryptographic library provides FIPS Approved cryptographic services to the NETSCOUT family of products.
Tested Configuration(s)
- ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2600 (Intel Xeon E5) without PAA
- ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2600 (Intel Xeon E5) with PAA
- ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2800 (Intel Xeon E5) with PAA
- ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2800 (Intel Xeon E5) without PAA (single-user mode)
- Custom Linux 2.6.39.1 running on a NETSCOUT 6900C Series {69XXC} (Intel Xeon X 5620) with PAA
- Custom Linux 2.6.39.1 running on a NETSCOUT 6900C Series {69XXC} (Intel Xeon X 5620) without PAA
- Custom Linux 2.6.39.1 running on a NETSCOUT 7900C Series {79XXC} (Intel Xeon X 5620) with PAA
- Custom Linux 2.6.39.1 running on a NETSCOUT 7900C Series {79XXC} (Intel Xeon X 5620) without PAA
- Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410} (Intel Xeon Silver) with PAA
- Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410} (Intel Xeon Silver) without PAA
- Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795} (Intel Xeon Gold) with PAA
- Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795} (Intel Xeon Gold) without PAA
- Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895} (Intel Xeon Gold) with PAA
- Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895} (Intel Xeon Gold) without PAA
- Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795} (Intel Xeon Gold) with PAA
- Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795} (Intel Xeon Gold) without PAA
- Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802} (Intel Xeon Gold) with PAA
- Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802} (Intel Xeon Gold) without PAA
- Custom Linux 3.10 running on a NETSCOUT PowerEdge R730 {enhanced} (Intel Xeon E5-2697 v3) with PAA
- Custom Linux 3.10 running on a NETSCOUT PowerEdge R730 {enhanced} (Intel Xeon E5-2697 v3) without PAA
- Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} (Intel Xeon Gold) with PAA
- Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} (Intel Xeon Gold) without PAA
- Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} (Intel Xeon Silver) with PAA
- Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} (Intel Xeon Silver) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 1400 Series {1410} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 1900 Series {1910D} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 1900 Series {1910D} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 2400 Series {2410} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 2400 Series {2410} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 2600 Series {2695} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 2600 Series {2695} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 2900 Series {2910D} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 2900 Series {2910D} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 4500 Series {4595D} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 4500 Series {4595D} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 4700 Series {4795} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 4700 Series {4795} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 4800 Series {4895} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 4800 Series {4895} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 6600 Series {6695} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 6600 Series {6695} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 9700 Series {9795} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 9700 Series {9795} (Intel Xeon E5) without PAA
- Custom Linux 3.7.5 running on a NETSCOUT 9800 Series {9802} (Intel Xeon E5) with PAA
- Custom Linux 3.7.5 running on a NETSCOUT 9800 Series {9802} (Intel Xeon E5) without PAA
- Tested as meeting level 1 with Custom Linux 3.7.5 running on a NETSCOUT 1400 Series {1410} (Intel Xeon E5) with PAA
FIPS Algorithms
AES |
Certs. #5669, #5672, #5900, #5936, #5938, #C196 and #C197 |
CVL |
Certs. #2056, #2124 and #C197 |
DRBG |
Certs. # Certs. #2291, #2462, #2489, #2491, #C196 and #C197 |
DSA |
Certs. #1457, #1495 and #C197 |
ECDSA |
Certs. #1535, #1571 and #C197 |
HMAC |
Certs. #3774, #3880 and #C197 |
RSA |
Certs. #3051, #3088 and #C197 |
SHS |
Certs. #4543, #4656 and #C197 |
Triple-DES |
Certs. #2841, #2869 and #C197 |
Allowed Algorithms
EC Diffie-Hellman (CVL Certs. #2056, #2124 and #C197, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 270 bits of encryption strength)