Module Name
Network Security Platform Sensor NS9300 S
Validation Dates
12/04/2019;03/23/2020
Caveat
When operated with the tamper evident seals installed as indicated in the Security Policy
Security Level Exceptions
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Network Security Platform products (formerly known as IntruShield) are Intrusion Prevention Systems (IPS) that protect network infrastructures and endpoints from intrusions such as zero-day, DoS, spyware, VoIP, botnet, malware, phishing, and encrypted attacks with highly accurate, enterprise-class risk-aware intrusion prevention. The Network Security Management system manages the sensor deployments and permits the customer to receive real-time network status updates and alerts, implement customized security policies and incident response plans, and perform forensic analysis of attacks.
FIPS Algorithms
KTS(AES Cert. #C409; key establishment methodology provides 128 or 256 bits of encryption |
|
AES |
Cert. #C409 |
CKG |
vendor affirmed |
CVL |
Cert. #C410 |
DRBG |
Cert. #C409 |
HMAC |
Cert. #C409 |
KTS |
AES Cert. #C409 and HMAC Cert. #C409; key establishment methodology provides 128 or 256 bits of encryption strength |
RSA |
Certs. #2638 and #C409 |
SHS |
Certs. #3960 and #C409 |
Allowed Algorithms
EC Diffie-Hellman (CVL Cert. #C410, key agreement; key establishment methodology provides 128 bits of encryption strength); NDRNG
Hardware Versions
P/Ns IPS-NS9300 S Version 1.30; FIPS Kit P/N IAC-FIPS-KT2
Firmware Versions
9.1.17.100