This page was not yet optimized for use on mobile devices.
Edge SWG
Certificate details
| Certificate ID | #5383 |
|---|---|
| Status | active |
| Validation dates | 08.07.2026 |
| Sunset date | 10-11-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software-Hybrid |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode and when installed, initialized and configured as specified in Section 11.1 of the Security Policy. The protocols TLS v1.0 and v1.1 shall not be used when operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The Edge SWG appliances from Symantec provide companies the ability to deploy a scalable proxy-based security solution to protect their organization against advanced threats. The Edge SWG acts as gateway between web users and the Internet: a single point where all web traffic can be monitored and corporate policies for web use can be enforced. |
| Vendor | Symantec, A Division of Broadcom http://www.broadcom.com |
| Lab | Acumen Security |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, CAST, HMACAsymmetric Algorithms
RSA 2048, ECDH, DHE, Diffie-Hellman, DHHash functions
SHA-1, MD5, PBKDFSchemes
MAC, Key AgreementProtocols
SSH, SSHv2, SSL, TLS, TLS v1.3, TLS 1.2, TLS 1.3Randomness
DRBG, RBGBlock cipher modes
CBC, GCMTrusted Execution Environments
PSP, SSCVendor
Broadcom, MicrosoftSecurity level
Level 1Certification process
out of scope, Dell PowerEdge R440 and S410 Server) and out of scope of this validation, and physical indicators are those of the host system (Dell PowerEdge R440 and S410 Server) and out of scope of this validation. The hypervisor provides virtualized ports and interfaces for the moduleStandards
FIPS 140-3, FIPS 198-1, FIPS186-4, FIPS 186-4, FIPS 180-4, PKCS 1, PKCS7, RFC5288, RFC4252, RFC8446Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5383,
"dgst": "08b25a1fb4a58b22",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA-1A3192",
"AES-GCMA2936",
"RSA KeyGen (FIPS186-4)A2936",
"SHA2-384A2936",
"KDF TLSA2936",
"SHA-1A3192",
"AES-CTRA2936",
"KDF SNMPA2936",
"KAS-FFC-SSC Sp800-56Ar3A2936",
"HMAC-SHA2-512A2936",
"SHA2-512A2936",
"RSA SigGen (FIPS186-4)A2936",
"TLS v1.3 KDFA2936",
"#A2936",
"Counter DRBGA2936",
"PBKDFA2936",
"Safe Primes Key VerificationA2936",
"AES-CBCA2936",
"HMAC-SHA2-384A2936",
"SHA2-224A2936",
"HMAC-SHA2-256A2936",
"KDF SSHA2936",
"SHA2-256A3192",
"RSA SigVer (FIPS186-4)A3192",
"Safe Primes Key GenerationA2936",
"#A3192",
"HMAC-SHA2-224A2936"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A2936",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A2936",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8",
"reference": "SP 800- 38A"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": ""
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A2936",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96-1024 Increment 8 Payload Length - Payload Length: 8-65536 Increment 8 AAD Length - AAD Length: 0-65536 Increment 8 IV Generation Mode - 8.2.1",
"reference": "SP 800- 38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A2936",
"properties": "Prediction Resistance - Yes Supports Reseed - Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - No, Yes Additional Input - Additional Input: 0-256 Increment 256, Additional Input: 256, Additional Input: 320, Additional Input: 384 Entropy Input - Entropy Input: 128-256 Increment 128, Entropy Input: 256, Entropy Input: 256-512 Increment 128, Entropy Input: 320, Entropy Input: 384 Nonce - Nonce: 0, Nonce: 128 Personalization String Length - Personalization String Length: 0-256 Increment 256, Personalization String Length: 256, Personalization String Length: 320, Personalization String Length: 384 Returned Bits - 256",
"reference": "SP 800- 90A Rev. 1"
},
{
"algorithm": "HMAC-SHA- 1",
"cavpCertName": "A2936",
"properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA- 1",
"cavpCertName": "A3192",
"properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 256-1024 Increment 128",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-224",
"cavpCertName": "A2936",
"properties": "MAC - MAC: 32-224 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-256",
"cavpCertName": "A2936",
"properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-384",
"cavpCertName": "A2936",
"properties": "MAC - MAC: 32-384 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-512",
"cavpCertName": "A2936",
"properties": "MAC - MAC: 32-512 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-FFC- SSC Sp800- 56Ar3",
"cavpCertName": "A2936",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "KDF SNMP (CVL)",
"cavpCertName": "A2936",
"properties": "Password Length - Password Length: 64, 128 Engine ID - 000002b87766554433221100, 80000D590431303035353937353531",
"reference": "SP 800- 135 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A2936",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800- 135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A2936",
"properties": "TLS Version - v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800- 135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A2936",
"properties": "Iteration Count - Iteration Count: 1-10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512 Password Length - Password Length: 8-128 Increment 8 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800- 132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A2936",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - Yes Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A2936",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A2936",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3192",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048 Hash Pair - Hash Algorithm - SHA2-256 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A2936",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A2936",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A2936",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3192",
"properties": "Message Length - Message Length: 8-51200 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A2936",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A2936",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3192",
"properties": "Message Length - Message Length: 0-51200 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A2936",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A2936",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A2936",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800- 135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Set up the first-time network configuratio n, CO username and password, and enable the module in the Approved mode",
"indicator": "\"FIPS mode enabled\" will be visible on the serial console upon the successful completion of the cryptograph ic algorithm self-tests",
"inputs": "N/A",
"name": "Module Initializatio n",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - Crypto Officer Password: W,E - \"Enabled mode\" Password: W,E - \"Setup\" Password: W,E",
"secFunImpl": "None"
},
{
"description": "Manage the module in the \"enabled\" mode of operation, granting access to higher privileged commands",
"indicator": "Successful completion of the service and \"enable mode\" prompt (i.e., the command line prompt where it specifies \"enable\"",
"inputs": "N/A",
"name": "Enable mode",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - \"Enabled mode\" Password: W,E",
"secFunImpl": "None"
},
{
"description": "Manage the module in the \"configurati on\" mode of operation, allowing permanent system modification to be made",
"indicator": "Successful completion of the service and \"configure mode\" prompt (i.e., the command line prompt where it specifies \"configure\" keyword)",
"inputs": "N/A",
"name": "Configurati on mode",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO)",
"secFunImpl": "None"
},
{
"description": "Take the module out of the Approved mode of operation",
"indicator": "N/A",
"inputs": "\"fipsmode disable\" command",
"name": "Disable Approved mode",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - \"Enabled mode\" Password:",
"secFunImpl": "None"
},
{
"description": "and restore it to factory state",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "W,E - Master Encryption Key (MEK): Z - SSH Session Key: Z - SSH Session Authenticati on Key: Z - DRBG Seed: Z - DRBG Key Value: Z - DRBG V Value: Z",
"secFunImpl": ""
},
{
"description": "Loads new external software and performs an integrity test using an RSA digital signature",
"indicator": "Image loaded successfully (for verified image). Image loading fails (when image verification fails)",
"inputs": "N/A",
"name": "Software load",
"outputs": "Verificati on status",
"rolesSspAccess": "Crypto- Officer (CO)",
"secFunImpl": "Signature Verification"
},
{
"description": "Manage the module through the CLI (SSH) remotely",
"indicator": "Successful connection to the module via SSH and \"System is in FIPS mode\" is displayed after executing \"show version\" command and \"Diffie- hellman\" groups displayed",
"inputs": "Client RSA public key",
"name": "Create remote managem ent session (SSH CLI)",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - RSA Public Key: R,E - RSA Private Key: R,E - Client RSA Public Key: R,E - DH Public Key: G,R,W,E - DH Private Key:",
"secFunImpl": "Encryption Decryption Authenticat ed Encryption Authenticat ed Decryption Key Derivation 1 DRBG Entropy Source Message Authenticati on Shared"
},
{
"description": "Descriptio",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "n",
"indicator": "after executing \"kexalgs view\" command",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "G,R,W,E - SSH Session Key: G,R,W,E - SSH Session Authenticati on Key: G,R,W,E - DRBG Seed: G,E - DRBG Key Value: G,E - DRBG V Value: G,E - Master Encryption Key (MEK): R,E - Entropy Input: G,E - Shared Secret: G,E - SP 800- 56Arev3 Domain Parameters : R,E User - RSA Public Key: R,E - RSA Private Key: R,E - Client RSA Public Key: R,E - DH Public Key: G,R,W,E - DH Private Key: G,R,W,E - SSH",
"secFunImpl": "Secret Computatio n KAS Asymmetric Key Generation Signature Generation Signature Verification Hashing"
},
{
"description": "Descriptio n",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP",
"secFunImpl": "Security Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Access Session Key: G,R,W,E - SSH Session Authenticati on Key: G,R,W,E - DRBG Seed: G,E - DRBG Key Value: G,E - DRBG V Value: G,E - Master Encryption Key (MEK): R,E - Entropy Input: G,E - Shared Secret: G,E - SP 800- 56Arev3 Domain Parameters : R,E",
"secFunImpl": ""
},
{
"description": "Create, edit, and delete operators (these may be Cos or Users); define operator\u0027s accounts, change password,",
"indicator": "N/A",
"inputs": "N/A",
"name": "Create, edit, and delete operators",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - Crypto Officer Password: R,W,E,Z - User Password: R,W,E,Z",
"secFunImpl": "None"
},
{
"description": "permissions Create, edit, and delete operator groups; define",
"indicator": "N/A",
"inputs": "N/A",
"name": "Create, edit, and delete operator groups",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO)",
"secFunImpl": "None"
},
{
"description": "common sets of operator permissions",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Create filters that are applied to user data streams",
"indicator": "N/A",
"inputs": "N/A",
"name": "Create filter rules",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO)",
"secFunImpl": "None"
},
{
"description": "The command \"show version\" will display if the module is configured in Approved mode",
"indicator": "Successful completion of the service and \"System is in FIPS mode\" is displayed after executing \"show version\" command",
"inputs": "N/A",
"name": "Show Approved status (Show Version)",
"outputs": "Successf ul completi on of the service and \"System is in FIPS mode\" is displaye d after executin g \"show version\" comman d",
"rolesSspAccess": "Crypto- Officer (CO) User",
"secFunImpl": "None"
},
{
"description": "Setup syslog for logging",
"indicator": "Connection established to syslog server successfully and \"tls 1.2, tls 1.3\" versions and \"dhe\" cipher suites displayed after executing \"view ssldevice- profile \" command",
"inputs": "Syslog commands",
"name": "Syslog",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - RSA Public Key: R,E - RSA Private Key: R,E - Client RSA Public Key: R,E - DH Public Key: G,R,W,E - DH Private Key: G,R,W,E - TLS Session",
"secFunImpl": "Encryption Decryption Authenticat ed Encryption Authenticat ed Decryption DRBG Entropy Source Message Authenticati on KAS Asymmetric Key Generation Signature Generation Signature"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "G,R,W,E - TLS Session Authenticati on Key: G,R,W,E - DRBG Seed: G,E - DRBG Key Value: G,E - DRBG V Value: G,E - Master Encryption Key (MEK): R,E - Shared Secret: G,E",
"secFunImpl": "Verification Hashing"
},
{
"description": "Create, edit, and delete operators (these may be COs or Users); define operator\u0027s accounts, change password, and assign permissions",
"indicator": "N/A",
"inputs": "N/A",
"name": "Import, replace, and delete SNMP keys",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO)",
"secFunImpl": "None"
},
{
"description": "Monitor the module using SNMPv3",
"indicator": "Successful completion of the service and \"System is in FIPS mode\" is displayed after executing \"show version\" command",
"inputs": "SNMP parameters (username, security level, target IP/port, authenticati on key, password)",
"name": "Create SNMPv3 session",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - SNMPv3 Privacy Key: R,E - SNMPv3 Session Authenticati on Key: R,E - SNMPv3 Password: R,E - Master",
"secFunImpl": "Key Derivation 1"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Encryption Key (MEK):",
"secFunImpl": ""
},
{
"description": "Backup or restore the module configuratio n",
"indicator": "Successful completion of the service and \"System is in FIPS mode\" is displayed after executing \"show version\" command and \"Diffiehellm an\" groups displayed after executing \"kexalgs view\" command",
"inputs": "Commands for the respective configuratio ns",
"name": "Manage module configurati on",
"outputs": "N/A",
"rolesSspAccess": "R,E Crypto- Officer (CO) - RSA Public Key: R,W,E - RSA Private Key: R,W,E - SSH Session Key: G,R,W,E - SSH Session Authenticati on Key: G,R,W,E - Crypto Officer Password: R,W,E - User Password: R,W,E - \"Enabled mode\" Password: R,W,E - Master Encryption Key (MEK): R,E",
"secFunImpl": "Key Derivation 1"
},
{
"description": "Zeroize keys by taking the module out of the Approved mode and restoring it to a factory state. This will zeroize all CSPs.",
"indicator": "Successful reboot after executing \"fipsmode disable\"",
"inputs": "N/A",
"name": "Zeroize keys (serial port only)",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - Master Encryption Key (MEK): Z - SSH Session Key: Z - SSH Session",
"secFunImpl": "None"
},
{
"description": "The zeroization occurs while the module is still in Approved- mode",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Authenticati on Key: Z - TLS Session Key: Z - TLS Session Authenticati on Key: Z - DH Private Key: Z",
"secFunImpl": ""
},
{
"description": "Change Crypto Officer password",
"indicator": "Successful completion of the service and \"System is in FIPS mode\" is displayed after executing \"show version\" command",
"inputs": "N/A",
"name": "Change password hash local user password",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - Crypto Officer Password: G,W - Master Encryption Key (MEK): R,E",
"secFunImpl": "Key Derivation 2"
},
{
"description": "Perform periodic self-test on demand by power cycling the host platform",
"indicator": "\"FIPS mode enabled\" will be visible on the serial console upon the successful completion of the cryptograph ic algorithm self-tests",
"inputs": "N/A",
"name": "Reboot the module (and perform selftests)",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) - DH Public Key: Z - DH Private Key: Z - SSH Session Key: Z - SSH Session Authenticati on Key: Z - TLS Session Key: Z - DRBG Seed: Z - DRBG Key Value: Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- DRBG V Value: Z - Master Encryption Key (MEK): R,E",
"secFunImpl": ""
},
{
"description": "Services that do not use any SSP",
"indicator": "N/A",
"inputs": "Input parameters for the utility function",
"name": "Utility",
"outputs": "N/A",
"rolesSspAccess": "Crypto- Officer (CO) User",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "Password based authenticati on",
"mechanism": "Password",
"name": "Password",
"perMinute": "The Crypto-Officer may connect locally using the serial port or remotely after establishing a SSH session. The fastest network connection supported by the module is 1000 Mbps. Hence at most (1000 \u00d710^6 \u00d7 60 = 6 \u00d7 10^10) =",
"strength": "For password authentication done by the module, passwords are required to be at minimum 8 characters in length, and at maximum 64 bytes (number of"
},
{
"description": "",
"mechanism": "",
"name": "",
"perMinute": "60,000,000,000 bits of data can be transmitted in one minute. Therefore, the probability that a random attempt will succeed or a false acceptance will occur in one minute is: 1 : [95^8 possible passwords / ((6 \u00d710^10 bits per minute) / 64 bits per password)] = 1: (95^8 possible passwords / 937,500,000 passwords per minute). This equals 1: 7,076,484 or 1 in 7.0 million; this is less than 1:100,000 as required by FIPS 140-3",
"strength": "characters is dependent on the character set used by system). An 8- character password allowing all printable American Standard Code for Information Interchange (ASCII) characters (95) with repetition equates to a 1: (95^8), or 1:6,634,204,312,890, 625 chance of false acceptance which is less than 1:1,000,000"
},
{
"description": "Public Key based authenticati on",
"mechanism": "RSA SigVer (FIPS186- 4) (A2936)",
"name": "Public Key Authenticati on",
"perMinute": "The fastest network connection supported by the module is 1000 Mbps. Hence at most (1000 \u00d710^6 \u00d7 60 = 6 \u00d7 10^10) = 60,000,000,000 bits of data can be transmitted in one minute. Therefore, the probability that a random attempt will succeed or a false acceptance will occur in one minute is less than 1: (2^112 / 6\u00d710^10), or 1: 86,538,280,975,580,460,47 5,508, which is less than 1:100,000 as required by FIPS 140-3",
"strength": "The module supports using RSA keys for authentication of Users during SSH. Using conservative estimates and equating a 2048-bit RSA key to a 112-bit symmetric key, the probability for a random attempt to succeed is 1:2^112 or 1: 5.19 x 10^33 which is less than 1:1,000,000"
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC Encrypt (A2936)",
"condition": "Reboot",
"details": "Encrypt",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "128 bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Encrypt (A2936)",
"condition": "Reboot",
"details": "Encrypt",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "256 bit",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A2936)",
"condition": "Reboot",
"details": "Hash",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A2936)",
"condition": "Reboot",
"details": "Hash",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A2936)",
"condition": "Reboot",
"details": "MAC",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A2936)",
"condition": "Reboot",
"details": "SP800- 90Arev1 Health Test",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "Critical Function"
},
{
"algorithmOrTest": "KAS-FFC- SSC Sp800- 56Ar3 (A2936)",
"condition": "Reboot",
"details": "Primitive Z KAT",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "2048 bit",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A2936)",
"condition": "Reboot",
"details": "KDF",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A2936)",
"condition": "Reboot",
"details": "KDF",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF (A2936)",
"condition": "Reboot",
"details": "KDF",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A2936)",
"condition": "Reboot",
"details": "KDF",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SNMP (A2936)",
"condition": "Reboot",
"details": "KDF",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A2936)",
"condition": "Reboot",
"details": "Generate",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "2048 bit with SHA2-256 and PKCS v1.5",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A2936)",
"condition": "Reboot",
"details": "Verify",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "2048 bit with SHA2-256 and PKCS v1.5",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) SW/FW Load Test (A3192)",
"condition": "Reboot",
"details": "Verify",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "2048 bit with SHA2-256 and PKCS v1.5",
"type": "SW/FW Load"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A2936)",
"condition": "New keypair generation",
"details": "KeyGen",
"indicator": "Successful completion",
"testMethod": "PCT",
"testProps": "",
"type": "PCT"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A2936)",
"condition": "New keypair generation",
"details": "KeyGen",
"indicator": "Successful completion",
"testMethod": "PCT",
"testProps": "",
"type": "PCT"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A3192)",
"condition": "Reboot",
"details": "MAC",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC Decrypt (A2936)",
"condition": "Reboot",
"details": "Decrypt",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "128 bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Decrypt (A2936)",
"condition": "Reboot",
"details": "Decrypt",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "128 bit",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3192)",
"condition": "Reboot",
"details": "Verify",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "2048 bit with SHA2-256",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Pre- operational self-test failure Conditional self-test failure",
"description": "When the pre- operational test or conditional self-test fails, the module enters hard error state, inhibits all data output and halts all operation",
"indicator": "Pre-operational self-test failure: \"PKCS7 Signature verification failed, signature does not match\". Conditional self-test failure: \"The SG Appliance has failed the FIPS Self-test\"",
"name": "Hard Error",
"recoveryMethod": "Reboot the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "The module supports approved mode of operation, once the initialization steps mentioned in Section 11.1 in the SP are completed.",
"name": "Approved Mode",
"statusIndicator": "Indicators specified for all approved services",
"type": "Approved"
},
{
"description": "The module supports non-approved mode of operation, where non-approved service are invoked.",
"name": "Non- Approved Mode",
"statusIndicator": "Indicators specified for all non-approved services",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [
{
"caveat": "All backups are transmitted via SSH (encrypted by the session key), so any non-conformant encryption is redundant/not required for security (No security claimed)",
"name": "AES CBC",
"use": "Configuration backup encryption"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "TLS v1.0/1.1 KDF with MD5",
"use": "TLS 1.0/1.1 sessions"
},
{
"name": "EC Diffie-Hellman",
"use": "Remote management session via SSH and syslog"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "TLS v1.0/1.1 KDF with MD5",
"description": "Proxy Traffic involves the use of TLS v1.0/1.1 sessions, which leverage MD5",
"name": "Proxy Traffic",
"role": "Crypto- Officer (CO), User"
},
{
"alg_accessed": "EC Diffie- Hellman",
"description": "Manage the module through the CLI (SSH) remotely",
"name": "Create remote management session (CLI)",
"role": "Crypto- Officer (CO), User"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Input packets",
"logicalInterface": "Data Input",
"physicalPort": "Input Registers"
},
{
"data": "Output packets",
"logicalInterface": "Data Output",
"physicalPort": "Output Registers"
},
{
"data": "Input packets (Configuration or Administrative data)",
"logicalInterface": "Control Input",
"physicalPort": "Control Registers"
},
{
"data": "Status",
"logicalInterface": "Status Output",
"physicalPort": "Status Registers"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Password Public Key Authentication",
"name": "Crypto-Officer (CO)",
"operatorType": "Crypto Officer",
"type": "Role"
},
{
"authMethodList": "Password Public Key Authentication",
"name": "User",
"operatorType": "User",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "2",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "1",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3192)",
"details": "Verify",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "2048-bit with SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A3192)",
"details": "Verify",
"indicator": "Successful completion",
"testMethod": "KAT",
"testProps": "HMAC-SHA1",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "RAM",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Input_1",
"sfiAlgo": "",
"source": "External to the module boundary"
},
{
"dest": "NVRAM",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Input_2",
"sfiAlgo": "Encryption",
"source": "External to the module boundary"
},
{
"dest": "External to the module boundary",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Output_1",
"sfiAlgo": "",
"source": "RAM"
},
{
"dest": "External to the module boundary",
"distribution": "Manual",
"entry": "Electronic",
"format": "Encrypted",
"name": "Output_2",
"sfiAlgo": "Encryption",
"source": "NVRAM"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "All SSPs stored in the RAM are zeroized after power cycle",
"method": "Power Cycle",
"operatorId": "On demand, via power cycle",
"rationale": "All SSPs stored in the RAM are zeroized after power cycle, thus preventing reuse"
},
{
"description": "SSPs can be zeroized by command",
"method": "Command based",
"operatorId": "On demand, by issuing command",
"rationale": "SSPs zeroized by command are rewritten with zeros thus preventing reuse"
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Non-volatile memory",
"name": "NVRAM",
"persistance": "Static"
},
{
"description": "Volatile memory",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Symantec SSP- S410",
"hypervisorHostOs": "KVM v2.3",
"operatingSystem": "SGOS v7.4",
"paa_pai": "Yes",
"processors": "Intel Xeon Silver 4210",
"version": "7.4"
},
{
"hardwarePlatform": "Dell PowerEdge R440",
"hypervisorHostOs": "VMware ESXi v6.5",
"operatingSystem": "SGOS v7.4",
"paa_pai": "Yes",
"processors": "Intel Xeon Silver 4216",
"version": "7.4"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric and Asymmetric",
"implName": "N/A",
"name": "CKG",
"reference": "Sections 4, 5.1, 5.2 and 6.1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Microsoft Azure Hypervisor running on Intel Xeon Platinum 8272CL processor",
"operatingSystem": "SGOS v7.4"
},
{
"hardwarePlatform": "AWS Xen Hypervisor running on Intel Xeon E5-2686 v4 processor",
"operatingSystem": "SGOS v7.4"
},
{
"hardwarePlatform": "Google Cloud Platform running on Intel Xeon\u00ae E5-2689 processor",
"operatingSystem": "SGOS v7.4"
},
{
"hardwarePlatform": "Microsoft Hyper-V hypervisor running on Intel Xeon Platinum 8260L processor running on Dell PowerEdge R840 server",
"operatingSystem": "SGOS v7.4"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 1
}
},
"FF": {
"DH": {
"DH": 15,
"DHE": 1,
"Diffie-Hellman": 1
}
},
"RSA": {
"RSA 2048": 1
}
},
"certification_process": {
"OutOfScope": {
"Dell PowerEdge R440 and S410 Server) and out of scope of this validation": 1,
"and physical indicators are those of the host system (Dell PowerEdge R440 and S410 Server) and out of scope of this validation. The hypervisor provides virtualized ports and interfaces for the module": 1,
"out of scope": 1
}
},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"GCM": {
"GCM": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"SSH": {
"SSH": 44,
"SSHv2": 2
},
"TLS": {
"SSL": {
"SSL": 1
},
"TLS": {
"TLS": 27,
"TLS 1.2": 1,
"TLS 1.3": 3,
"TLS v1.3": 5
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 2
},
"MAC": {
"MAC": 9
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 1
}
},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 1,
"AES-128": 3,
"AES-192": 2,
"AES-256": 3,
"HMAC-SHA- 1": 4,
"HMAC-SHA-1": 10,
"HMAC-SHA1": 4,
"PKCS 1": 5,
"PKCS7": 4,
"RSA 2048": 1,
"SHA-1": 9,
"SHA2-224": 5,
"SHA2-256": 15,
"SHA2-384": 6,
"SHA2-512": 8
}
},
"fips_security_level": {
"Level": {
"Level 1": 4
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 3
}
},
"PBKDF": {
"PBKDF": 6
},
"SHA": {
"SHA1": {
"SHA-1": 9
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 48
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 8,
"FIPS 180-4": 7,
"FIPS 186-4": 4,
"FIPS 198-1": 6,
"FIPS186-4": 19
},
"PKCS": {
"PKCS 1": 3,
"PKCS7": 2
},
"RFC": {
"RFC4252": 1,
"RFC5288": 1,
"RFC8446": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 3,
"AES-128": 3,
"AES-192": 2,
"AES-256": 3
},
"CAST": {
"CAST": 34
}
},
"constructions": {
"MAC": {
"HMAC": 2
}
}
},
"tee_name": {
"AMD": {
"PSP": 4
},
"IBM": {
"SSC": 2
}
},
"tls_cipher_suite": {},
"vendor": {
"Broadcom": {
"Broadcom": 48
},
"Microsoft": {
"Microsoft": 4
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA-1A3192",
"AES-GCMA2936",
"RSA KeyGen (FIPS186-4)A2936",
"SHA2-384A2936",
"KDF TLSA2936",
"SHA-1A3192",
"AES-CTRA2936",
"KDF SNMPA2936",
"KAS-FFC-SSC Sp800-56Ar3A2936",
"HMAC-SHA2-512A2936",
"SHA2-512A2936",
"RSA SigGen (FIPS186-4)A2936",
"TLS v1.3 KDFA2936",
"Counter DRBGA2936",
"PBKDFA2936",
"Safe Primes Key VerificationA2936",
"AES-CBCA2936",
"HMAC-SHA2-384A2936",
"SHA2-224A2936",
"HMAC-SHA2-256A2936",
"KDF SSHA2936",
"SHA2-256A3192",
"RSA SigVer (FIPS186-4)A3192",
"Safe Primes Key GenerationA2936",
"HMAC-SHA2-224A2936"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3192",
"#A2936"
]
},
"policy_metadata": {
"/Author": "Sowndar Raja Rao Gillan Gopi Intertek",
"/CreationDate": "D:20260616145100-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260616145100-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 818045,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-4/deploy-edge-swg-va/Gen2_Overview/Gen2_create_the_swg_va/Gen2_download_the_virtual_appliance_package.html",
"https://support.broadcom.com/security/download-center"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 45
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "08210bb28513b5f4ae9765cb875568b5489ee53ddc671d342b1937ba7b53354a",
"source_hash": "426b7dced1b98b0d9336797e69644726ac37215a8f9028297b0d967115161869",
"txt_hash": "9f6fe722a2f47bfc608f36502ada70a8da16c7a5918140d151d7218405293b12"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode and when installed, initialized and configured as specified in Section 11.1 of the Security Policy. The protocols TLS v1.0 and v1.1 shall not be used when operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
"date_sunset": "2029-11-10",
"description": "The Edge SWG appliances from Symantec provide companies the ability to deploy a scalable proxy-based security solution to protect their organization against advanced threats. The Edge SWG acts as gateway between web users and the Internet: a single point where all web traffic can be monitored and corporate policies for web use can be enforced.",
"embodiment": "MultiChipStand",
"exceptions": [
"Roles, services, and authentication: Level 2",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Edge SWG",
"module_type": "Software-Hybrid",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-07-08",
"lab": "Acumen Security",
"validation_type": "Initial"
}
],
"vendor": "Symantec, A Division of Broadcom",
"vendor_url": "http://www.broadcom.com"
}
}