StoneGate High Availability Firewall and VPN

Certificate #344

Webpage information

Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 16.09.2003 , 07.10.2003 , 29.04.2004
Standard FIPS 140-2
Security level 1
Type Firmware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Tested: Debian GNU/Linux Version 3.0
Description StoneGate is a firewall and VPN software solution. It features clustering, load balancing between multiple ISPs, encrypted VPN client connectivity and advanced central administration tools.
Version (Firmware) 2.0.5
Vendor Stonesoft Corporation
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Symmetric Algorithms
AES, Twofish, DES, 3DES, Blowfish
Asymmetric Algorithms
Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-256, MD5
Schemes
MAC, Key Exchange
Protocols
SSH, TLS, IKE, VPN
Randomness
PRNG, RNG
Libraries
OpenSSL
Block cipher modes
ECB, CBC, CFB, OFB

Security level
level 1, Level 1

Standards
FIPS 140-2, FIPS 46-3, FIPS 197, FIPS 180-1, FIPS 186-2, PKCS#1, RFC 2401, RFC 2246, RFC-2409

File metadata

Title Microsoft Word - SG_FIPS_007.28_09082003-Security-Policy.doc
Author dcurts
Creation date D:20030908154406Z
Modification date D:20030916173812-04'00'
Pages 16
Creator PScript5.dll Version 5.2
Producer Acrobat Distiller 5.0.5 (Windows)

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 344,
  "dgst": "02e6295d8f522840",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Triple-DES#146",
        "DSA#77",
        "DSA#78",
        "Triple-DES#145",
        "HMAC-SHA-1#132",
        "RSA#1",
        "SHA-1#131",
        "SHA-1#132",
        "AES#39",
        "Triple-DES#147",
        "AES#40"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2.0.5"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "Diffie-Hellman": 5
          },
          "DSA": {
            "DSA": 9
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "CFB": {
          "CFB": 3
        },
        "ECB": {
          "ECB": 3
        },
        "OFB": {
          "OFB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 11
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 32
        },
        "SSH": {
          "SSH": 10
        },
        "TLS": {
          "TLS": {
            "TLS": 18
          }
        },
        "VPN": {
          "VPN": 30
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 2
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#131": 1,
          "#132": 2,
          "#145": 1,
          "#146": 1,
          "#147": 1,
          "#194": 1,
          "#39": 1,
          "#40": 1,
          "#77": 1,
          "#78": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (#39": 1,
          "AES (#40": 1,
          "DES (#194": 1,
          "DES1": 1,
          "DES2": 1,
          "DSA (#77": 1,
          "DSA (#78": 1,
          "HMAC-SHA-1": 15,
          "HMAC-SHA-1 (#132": 1,
          "PKCS#1": 6,
          "SHA-1": 4,
          "SHA-1 (#131": 1,
          "SHA-1 (#132": 1,
          "SHA-256": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-256": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 3
        },
        "RNG": {
          "RNG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 36,
          "FIPS 180-1": 1,
          "FIPS 186-2": 2,
          "FIPS 197": 1,
          "FIPS 46-3": 2
        },
        "PKCS": {
          "PKCS#1": 3
        },
        "RFC": {
          "RFC 2246": 2,
          "RFC 2401": 1,
          "RFC-2409": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 6
          },
          "Twofish": {
            "Twofish": 2
          }
        },
        "DES": {
          "3DES": {
            "3DES": 11
          },
          "DES": {
            "DES": 5
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "dcurts",
      "/CreationDate": "D:20030908154406Z",
      "/Creator": "PScript5.dll Version 5.2",
      "/ModDate": "D:20030916173812-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 5.0.5 (Windows)",
      "/Title": "Microsoft Word - SG_FIPS_007.28_09082003-Security-Policy.doc",
      "pdf_file_size_bytes": 213193,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 16
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "d6f97009ff20e9cb92641f3c3101f0fef800bc768c9c05ff05d7790139c3e32a",
    "policy_txt_hash": "92692e3eef8800fca4081736554d4e27fc5410ee926de38f8dc60f3184f6a71e"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt344.pdf",
    "date_sunset": null,
    "description": "StoneGate is a firewall and VPN software solution. It features clustering, load balancing between multiple ISPs, encrypted VPN client connectivity and advanced central administration tools.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Tested: Debian GNU/Linux Version 3.0"
    ],
    "fw_versions": "2.0.5",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "StoneGate High Availability Firewall and VPN",
    "module_type": "Firmware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2003-09-16",
        "lab": "CYGNACOM SOLUTIONS INC",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2003-10-07",
        "lab": "",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2004-04-29",
        "lab": "",
        "validation_type": "Update"
      }
    ],
    "vendor": "Stonesoft Corporation",
    "vendor_url": "http://www.stonesoft.com"
  }
}