This page was not yet optimized for use on mobile devices.
Juniper Networks SRX Series Services Gateways
Certificate details
| Certificate ID | #5141 |
|---|---|
| Status | active |
| Validation dates | 18.01.2026 , 12.02.2026 |
| Sunset date | 17-01-2031 |
| Standard | FIPS 140-3 |
| Security level | 2 |
| Type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When installed, initialized and configured as specified in Section 11.1 of the Security Policy |
| Exceptions |
|
| Description | The SRX1500, SRX4100, SRX4200 and SRX4600 Service Gateways offer outstanding protection, performance, scalability, availability, and integrated security services. Designed for high-performance security services architecture, and seamless integration of networking and security in a single platform, the SRX1500, SRX4100, SRX4200 and SRX4600 are best suited for campuses, regional headquarters and enterprise data centers with a focus on application visibility and control, intrusion prevention, advanced threat protection, authentication, confidentiality of information, and integrated cloud-based security. The SRX5400, SRX5600, and SRX5800 next-generation firewalls are built for large enterprise data centers, service provider infrastructure, and public sector networks. With a modular architecture and high-performance line cards, the SRX Series firewalls are open, scalable security platforms with flexible connectivity options and service integration. |
| Vendor | Juniper Networks, Inc http://www.juniper.net |
| Lab | Teron Labs |
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, CAST, HMACAsymmetric Algorithms
RSA 2048, RSA 4096, ECDSA, Diffie-Hellman, DHHash functions
SHA-1, SHA1, SHA2Schemes
MAC, Key Exchange, Key AgreementProtocols
SSH, SSHv2, TLS, IPsecRandomness
DRBG, RBGLibraries
OpenSSLElliptic Curves
P-256, P-384, P-521Block cipher modes
CBC, CTRTrusted Execution Environments
PSPSecurity level
Level 2, Level 1, level 2Certification process
out of scope, secure initialization instructions results in the module being in a non-compliant state which is out of scope of the validation. 2.5 Algorithms Approved Algorithms: Although the module may have been tested forStandards
FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 186-5, SP 800-38A, SP 800-56A, SP 800-90A, SP 800-135, SP 800-133, PKCS 1, ISO/IEC 19790:2012Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5141,
"dgst": "23c6d0d78ef24a97",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A3693",
"RSA SigGen (FIPS186-4)A3693",
"SHA-1A3693",
"RSA SigVer (FIPS186-4)A3693",
"AES-CTRA3693",
"SHA2-512A3693",
"HMAC-SHA-1A3693",
"KDF SSHA4271",
"RSA KeyGen (FIPS186-4)A3693",
"KAS-ECC-SSC Sp800-56Ar3A3610",
"HMAC-SHA2-512A3693",
"AES-CBCA3693",
"SHA2-256A3693",
"ECDSA KeyVer (FIPS186-4)A3693",
"ECDSA SigGen (FIPS186-4)A3693",
"ECDSA KeyGen (FIPS186-4)A3693",
"ECDSA SigVer (FIPS186-4)A3693",
"HMAC DRBGA3493",
"SHA2-384A3693"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 40
}
},
"FF": {
"DH": {
"DH": 6,
"Diffie-Hellman": 1
}
},
"RSA": {
"RSA 2048": 4,
"RSA 4096": 3
}
},
"certification_process": {
"OutOfScope": {
"out of scope": 1,
"secure initialization instructions results in the module being in a non-compliant state which is out of scope of the validation. 2.5 Algorithms Approved Algorithms: Although the module may have been tested for": 1
}
},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CTR": {
"CTR": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 4
}
},
"crypto_protocol": {
"IPsec": {
"IPsec": 2
},
"SSH": {
"SSH": 95,
"SSHv2": 1
},
"TLS": {
"TLS": {
"TLS": 2
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 2
},
"KEX": {
"Key Exchange": 1
},
"MAC": {
"MAC": 20
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 32,
"P-384": 24,
"P-521": 26
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 3,
"#10": 3,
"#11": 1,
"#12": 1,
"#13": 1,
"#15": 1,
"#2": 2,
"#3": 2,
"#4": 3,
"#5": 3,
"#6": 2,
"#7": 3,
"#8": 4,
"#9": 4
}
},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 2,
"AES CBC 128/192/256": 1,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1,
"DRBG 256": 1,
"HMAC-SHA-1": 18,
"PKCS 1": 2,
"RSA 2048": 4,
"RSA 4096": 3,
"SHA 256": 1,
"SHA 384": 1,
"SHA 512": 1,
"SHA-1": 11,
"SHA1": 2,
"SHA2": 7,
"SHA2- 256": 3,
"SHA2- 512": 2,
"SHA2-256": 24,
"SHA2-384": 8,
"SHA2-512": 11
}
},
"fips_security_level": {
"Level": {
"Level 1": 1,
"Level 2": 3,
"level 2": 1
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 11,
"SHA1": 2
},
"SHA2": {
"SHA2": 7
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 58
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 72,
"FIPS 180-4": 9,
"FIPS 186-4": 8,
"FIPS 186-5": 2,
"FIPS 198-1": 6,
"FIPS186-4": 27
},
"ISO": {
"ISO/IEC 19790:2012": 1
},
"NIST": {
"SP 800-133": 1,
"SP 800-135": 1,
"SP 800-38A": 2,
"SP 800-56A": 2,
"SP 800-90A": 1
},
"PKCS": {
"PKCS 1": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 2,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1
},
"CAST": {
"CAST": 68
}
},
"constructions": {
"MAC": {
"HMAC": 45
}
}
},
"tee_name": {
"AMD": {
"PSP": 7
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/Comments": "",
"/Company": "",
"/ContentTypeId": "0x0101008CEA64F1FB1D5A4F93ABC4EA3F4AF0B8",
"/CreationDate": "D:20260212150734-05\u002700\u0027",
"/Creator": "Acrobat PDFMaker 25 for Word",
"/Keywords": "",
"/MediaServiceImageTags": "",
"/ModDate": "D:20260212150928-05\u002700\u0027",
"/Producer": "Adobe PDF Library 25.1.51",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 3827422,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://www.teronlabs.com/",
"https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/56"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 63
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": "8a5872d152408d7ef934f13d9ef81ecc606b23d160fbf069e95d7df8b4d5c191",
"txt_hash": "7e0cadcff7072809d2682a70480ba403978aa3c3bb0c6c8e0bb32ac628361816"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/January 2026_250226_0720.pdf",
"date_sunset": "2031-01-17",
"description": "The SRX1500, SRX4100, SRX4200 and SRX4600 Service Gateways offer outstanding protection, performance, scalability, availability, and integrated security services. Designed for high-performance security services architecture, and seamless integration of networking and security in a single platform, the SRX1500, SRX4100, SRX4200 and SRX4600 are best suited for campuses, regional headquarters and enterprise data centers with a focus on application visibility and control, intrusion prevention, advanced threat protection, authentication, confidentiality of information, and integrated cloud-based security. The SRX5400, SRX5600, and SRX5800 next-generation firewalls are built for large enterprise data centers, service provider infrastructure, and public sector networks. With a modular architecture and high-performance line cards, the SRX Series firewalls are open, scalable security platforms with flexible connectivity options and service integration.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Operational environment: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 2,
"mentioned_certs": {},
"module_name": "Juniper Networks SRX Series Services Gateways",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-01-18",
"lab": "Teron Labs",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-02-12",
"lab": "Teron Labs",
"validation_type": "Update"
}
],
"vendor": "Juniper Networks, Inc",
"vendor_url": "http://www.juniper.net"
}
}