U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Cryptographic Module Validation Program CMVP

Certificate #3934

Details

Module Name
Juniper Networks MX240, MX480, MX960 3D Universal Edge Routers with RE1800 Routing Engine and Multiservices MPC
Standard
FIPS 140-2
Status
Active
Sunset Date
5/25/2026
Overall Level
1
Caveat
When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Hardware
Embodiment
Multi-Chip Stand Alone
Description
Juniper Networks MX Series is a robust portfolio of SDN enabled routing platforms that provide industry leading system capacity, density, security and performance. Key features include support for a wide range of L2/L3 VPN services and advanced broadband network gateway functions, along with integrated routing, switching and security services. Multiservices MPC supports Layer 3 services such as stateful firewall, NAT, IPsec, active flow monitoring and RPM.
Tested Configuration(s)
  • N/A
FIPS Algorithms
AES Certs. #C1786, #C1787 and #C1788
CVL Certs. #C1786 and #C1787
DRBG Certs. #C1784, #C1786 and #C1787
ECDSA Certs. #C1786 and #C1788
HMAC Certs. #C1784, #C1785, #C1786, #C1787 and #C1788
KAS-SSC vendor affirmed
KTS AES Certs. #C1786 and #C1787 and HMAC Certs. #C1786 and #C1787; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS Triple-DES Certs. #C1786 and #C1787 and HMAC Certs. #C1786 and #C1787; key establishment methodology provides 112 bits of encryption strength
RSA Certs. #C1786 and #C1788
SHS Certs. #C1784, #C1785, #C1786, #C1787 and #C1788
Triple-DES Certs. #C1786, #C1787 and #C1788
Allowed Algorithms
NDRNG
Hardware Versions
MX240, MX480, MX960 with components identified in Security Policy Table 1
Firmware Versions
Junos OS 19.1R2

Vendor

Juniper Networks, Inc.
1133 Innovation Way
Sunnyvale, CA 94089
USA

Geetha Naik
ngeetha@juniper.net
Phone: +91-80-61214404
Fax: N/A
Bill Shelton
bshelton@juniper.net
Phone: 408-745-2000
Fax: 408-745-2100

Validation History

Date Type Lab
5/26/2021 Initial ACUMEN SECURITY, LLC