U.S. flag   An unofficial archive of your favorite United States government website
This is an archive
(replace .gov by .rip)

Cryptographic Module Validation Program CMVP

Certificate #3728

Details

Module Name
Cisco Firepower Management Center Virtual (FMCv) Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
10/19/2025
Validation Dates
10/20/2020
Overall Level
1
Caveat
When operated in FIPS mode. When installed, initialized and configured as specified in Section 3 of the Security Policy
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 2
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Firepower Management Center Virtual working like the Firepower Management Center appliance aggregates and correlates network traffic information and performance data, assessing the impact of events on particular hosts. You can monitor the information that your device reports, and assess and control the overall activity that occurs on your network. The FMCv also controls the network management features on your devices: switching, routing, NAT and VPN.
Tested Configuration(s)
  • FXOS version 2 on VMware ESXi 6.0 running on Cisco C220 M5 with Intel Xeon Silver 4110 (Skylake)
  • FXOS version 2 on VMware ESXi 6.5 running on Cisco C220 M5 with Intel Xeon Silver 4110 (Skylake) (single-user mode)
FIPS Algorithms
AES Cert. #5008
CVL Cert. #1561
DRBG Cert. #1828
ECDSA Cert. #1277
HMAC Cert. #3329
RSA Cert. #2703
SHS Cert. #4074
Triple-DES Cert. #2584
Allowed Algorithms
Diffie-Hellman (CVL Cert. #1561, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1561, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Software Versions
6.4

Vendor

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

Global Certification Team
certteam@cisco.com

Lab

GOSSAMER SECURITY SOLUTIONS INC
NVLAP Code: 200997-0