{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "08b25a1fb4a58b22", "cert_id": 5383, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Edge SWG", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-07-08", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.broadcom.com", "vendor": "Symantec, A Division of Broadcom", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf", "module_type": "Software-Hybrid", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode and when installed, initialized and configured as specified in Section 11.1 of the Security Policy. The protocols TLS v1.0 and v1.1 shall not be used when operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Roles, services, and authentication: Level 2", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The Edge SWG appliances from Symantec provide companies the ability to deploy a scalable proxy-based security solution to protect their organization against advanced threats. The Edge SWG acts as gateway between web users and the Internet: a single point where all web traffic can be monitored and corporate policies for web use can be enforced.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2029-11-10", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#1": 1}}, "fips_security_level": {"Level": {"Level 1": 5}}, "fips_certlike": {"Certlike": {"HMAC-SHA1": 4, "HMAC-SHA- 1": 4, "HMAC-SHA-1": 10, "SHA2-224": 5, "SHA2-256": 15, "SHA2-384": 6, "SHA2-512": 8, "SHA-1": 9, "RSA 2048": 1, "PKCS 1": 5, "- PKCS 1": 1, "PKCS7": 4, "AES-128": 3, "AES-192": 2, "AES-256": 3}}, "vendor": {"Broadcom": {"Broadcom": 48}, "Microsoft": {"Microsoft": 4}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 3, "AES-192": 2, "AES-256": 3, "AES": 2}, "CAST": {"CAST": 34}}, "constructions": {"MAC": {"HMAC": 2}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 1}}, "FF": {"DH": {"DHE": 1, "Diffie-Hellman": 1, "DH": 15}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 9}}, "MD": {"MD5": {"MD5": 3}}, "PBKDF": {"PBKDF": 6}}, "crypto_scheme": {"MAC": {"MAC": 9}, "KA": {"Key Agreement": 1}}, "crypto_protocol": {"SSH": {"SSH": 44, "SSHv2": 2}, "TLS": {"SSL": {"SSL": 1}, "TLS": {"TLS": 27, "TLS v1.3": 5, "TLS 1.2": 1, "TLS 1.3": 3}}}, "randomness": {"PRNG": {"DRBG": 48}, "RNG": {"RBG": 2}}, "cipher_mode": {"CBC": {"CBC": 1}, "GCM": {"GCM": 2}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 4}, "IBM": {"SSC": 2}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 8, "FIPS 198-1": 6, "FIPS186-4": 19, "FIPS 186-4": 4, "FIPS 180-4": 7}, "PKCS": {"PKCS 1": 3, "PKCS7": 2}, "RFC": {"RFC5288": 1, "RFC4252": 1, "RFC8446": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "Dell PowerEdge R440 and S410 Server) and out of scope of this validation": 1, "and physical indicators are those of the host system (Dell PowerEdge R440 and S410 Server) and out of scope of this validation. The hypervisor provides virtualized ports and interfaces for the module": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 818045, "pdf_is_encrypted": false, "pdf_number_of_pages": 45, "/Author": "Sowndar Raja Rao Gillan Gopi  Intertek", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260616145100-04'00'", "/ModDate": "D:20260616145100-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-4/deploy-edge-swg-va/Gen2_Overview/Gen2_create_the_swg_va/Gen2_download_the_virtual_appliance_package.html", "https://support.broadcom.com/security/download-center"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA2-256A3192", "RSA KeyGen (FIPS186-4)A2936", "HMAC-SHA2-384A2936", "HMAC-SHA2-224A2936", "KDF TLSA2936", "HMAC-SHA2-256A2936", "PBKDFA2936", "HMAC-SHA-1A3192", "SHA2-384A2936", "HMAC-SHA2-512A2936", "AES-CTRA2936", "SHA2-512A2936", "Safe Primes Key GenerationA2936", "Counter DRBGA2936", "AES-GCMA2936", "KDF SNMPA2936", "KAS-FFC-SSC Sp800-56Ar3A2936", "Safe Primes Key VerificationA2936", "RSA SigVer (FIPS186-4)A3192", "TLS v1.3 KDFA2936", "SHA2-224A2936", "KDF SSHA2936", "AES-CBCA2936", "SHA-1A3192", "RSA SigGen (FIPS186-4)A2936"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "426b7dced1b98b0d9336797e69644726ac37215a8f9028297b0d967115161869", "txt_hash": "56ae85735b94e9b369e4299a9be031785b5935489f5831401ed761f5081478e0", "json_hash": null}}}