Module Name
Juniper Networks MX240, MX480, MX960 3D Universal Edge Routers with RE-S-X6-64G Routing Engine and Multiservices MPC
Caveat
When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Juniper Networks MX Series is a robust portfolio of SDN enabled routing platforms that provide industry leading system capacity, density, security and performance. Key features include support for a wide range of L2/L3 VPN services and advanced broadband network gateway functions, along with integrated routing, switching and security services. Multiservices MPC supports Layer 3 services such as stateful firewall, NAT, IPsec, active flow monitoring and RPM.
FIPS Algorithms
| AES |
Certs. #C1786, #C1787 and #C1788 |
| CVL |
Certs. #C1786 and #C1787 |
| DRBG |
Certs. #C1784, #C1786 and #C1787 |
| ECDSA |
Certs. #C1786 and #C1788 |
| HMAC |
Certs. #C1784, #C1785, #C1786, #C1787 and #C1788 |
| KAS-SSC |
vendor affirmed |
| KTS |
AES Certs. #C1786 and #C1787 and HMAC Certs. #C1786 and #C1787; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
Triple-DES Certs. #C1786 and #C1787 and HMAC Certs. #C1786 and #C1787; key establishment methodology provides 112 bits of encryption strength |
| RSA |
Certs. #C1786 and #C1788 |
| SHS |
Certs. #C1784, #C1785, #C1786, #C1787 and #C1788 |
| Triple-DES |
Certs. #C1786, #C1787 and #C1788 |
Hardware Versions
MX240, MX480, MX960 with components identified in Security Policy Table 1
Firmware Versions
Junos OS 19.1R2