{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "1d653df7edb962b6", "cert_id": 5276, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Forcepoint Next Generation Firewall for Desktop Appliances", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-05-20", "validation_type": "Initial", "lab": "Leidos Accredited Testing & Evaluation (AT&E) Lab"}], "vendor_url": "http://www.forcepoint.com", "vendor": "Forcepoint", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2026_030626_0716.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs", "exceptions": ["Roles, services, and authentication: Level 2", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The NGFW appliances are high-performance network security appliances that add a broad range of built-in security features, including VPN, IPS, anti-evasion, TLS inspection, SD-WAN, and mission-critical application proxies, to a traditional firewall and provides end-to-end protection across the entire enterprise network.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-05-19", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 4}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 16, "SHA2-224": 5, "SHA2-256": 21, "SHA2-384": 9, "SHA2- 512": 2, "SHA-1": 11, "SHA2-512": 18, "SHA3-256": 5, "SHA2- 256": 4, "RSA 2048": 2, "- PKCS 1": 1, "AES-256": 4, "DRBG 512": 2, "PKCS 1": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 4, "AES": 64, "AES-": 6}, "CAST": {"CAST": 70}}, "constructions": {"MAC": {"HMAC": 79}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 2}, "ECC": {"ECDH": {"ECDH": 80}, "ECDSA": {"ECDSA": 212}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 10, "DH": 56}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 11}, "SHA3": {"SHA3-256": 5}}, "PBKDF": {"PBKDF": 9, "PBKDF2": 2}}, "crypto_scheme": {"MAC": {"MAC": 44}, "KA": {"Key Agreement": 50}}, "crypto_protocol": {"SSH": {"SSH": 2}, "TLS": {"TLS": {"TLS": 284, "TLS v1.2": 8}}, "IKE": {"IKEv1": 8, "IKEv2": 10, "IKE": 39}, "IPsec": {"IPsec": 46}, "VPN": {"VPN": 157}}, "randomness": {"PRNG": {"DRBG": 93}, "RNG": {"RBG": 2}}, "cipher_mode": {"CBC": {"CBC": 35}, "GCM": {"GCM": 26}}, "ecc_curve": {"NIST": {"P-224": 24, "P-256": 20, "P-384": 8, "P-521": 26}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 2, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1}}, "crypto_library": {"OpenSSL": {"OpenSSL": 11}}, "vulnerability": {}, "side_channel_analysis": {"FI": {"malfunction": 1}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 25}, "IBM": {"SSC": 64}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 13, "FIPS 140": 3, "FIPS186-5": 30, "FIPS 186-5": 23, "FIPS 198-1": 9, "FIPS 180-4": 10, "FIPS 202": 1, "FIPS186-4": 3, "FIPS 186-4": 16}, "NIST": {"SP 800-38A": 3, "SP 800-38D": 3, "SP 800-38F": 4, "SP 800-90A": 1, "SP 800-56A": 4, "SP 800-135": 3, "SP 800-108": 1, "SP 800-132": 6, "NIST SP 800-133": 2, "NIST SP 800-57": 1, "SP 800-63B": 1, "SP 800-140F": 1}, "PKCS": {"PKCS 1": 1}, "RFC": {"RFC7627": 5, "RFC 5288": 1, "RFC 4106": 1, "RFC 7296": 1}, "ISO": {"ISO/IEC 19790:2012": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1443562, "pdf_is_encrypted": false, "pdf_number_of_pages": 100, "/Author": "Hawes, David J. (Fed)", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260518085158-04'00'", "/ModDate": "D:20260518085158-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/projects/cryptographic-module-validation-program", "https://support.forcepoint.com/Login", "https://www.forcepoint.com/", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=37160", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=34775", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=37036", "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=37403"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-KWPA4793", "SHA2-384A4793", "AES-GCMA4793", "RSA KeyGen (FIPS186-5)A4793", "SHA3-256A4426", "RSA SigVer (FIPS186-5)A4793", "Safe Primes Key GenerationA4793", "HMAC-SHA2-384A4793", "ECDSA KeyVer (FIPS186-5)A4793", "KAS-ECC-SSC Sp800-56Ar3A4793", "SHA-1A4793", "KAS-FFC-SSC Sp800-56Ar3A4793", "HMAC-SHA-1A4793", "Counter DRBGA4793", "Safe Primes Key VerificationA4793", "KDF SP800-108A4550", "KDF IKEv1A4793", "RSA SigGen (FIPS186-5)A4793", "ECDSA KeyGen (FIPS186-5)A4793", "AES-CBCA4793", "KDF IKEv2A4793", "RSA SigVer (FIPS186-4)A4793", "HMAC-SHA2-512A4793", "ECDSA SigGen (FIPS186-5)A4793", "AES-ECBA4793", "SHA2-224A4793", "SHA2-512A4793", "ECDSA SigVer (FIPS186-5)A4793", "TLS v1.2 KDF RFC7627A4793", "HMAC-SHA2-256A4793", "PBKDFA4550", "SHA2-256A4793"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "33b86e386f6405b12857747fbadeecb3b5ae42e079f4aef7337c58676ad38338", "txt_hash": "7442cdd3aa2f5cf3e09fe1abc8d379ed63b37db145f8742646e9646822966dc0", "json_hash": null}}}