SonicWALL SMA Series v12.1 EX-9000, SMA 6200, SMA 7200

Certificate #3339

Webpage information

Status historical
Historical reason SP 800-56Arev3 transition
Validation dates 10.12.2018 , 19.04.2020
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Mitigation of Other Attacks: N/A
Description SonicWall Software SMA 6200, SMA 7200 and SRA EX9000 are part of the SonicWall Security Solution Enterprise product family. They provide hardware appliance based VPN Virtual Private Network mobile access solutions to a wide variety of end user devices including Microsoft Windows, Apple OSX, Linux, Apple iOS, Google Android and Google Chromebook among others.
Version (Hardware) EX-9000, SMA 6200 and SMA 7200
Version (Firmware) 12.1.0-04493
Vendor SonicWall, Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Symmetric Algorithms
AES-128, AES-256, AES, RC4, Triple-DES, HMAC, HMAC-SHA-256
Asymmetric Algorithms
RSA 1024, RSA 2048, ECDSA, ECC, Diffie-Hellman
Hash functions
SHA-1, SHA1, SHA-256, SHA256, SHA-384, SHA-512, MD5
Schemes
Key Exchange, Key Agreement
Protocols
SSH, SSL, TLS, IKE, IPsec, VPN
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-384, P-160
Block cipher modes
ECB, CBC, CTR, GCM
TLS cipher suites
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA2561, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA256

Standards
FIPS 140-2, FIPS 186-4, FIPS 180-4, FIPS 197, FIPS 198-1, SP 800-52, SP 800-90, SP 800-133, SP 800-135, SP 800-38A, SP 800-38D, SP 800-38F, SP 800-67, SP 800-90A, PKCS #12, RFC 2865, RFC 4254, RFC 4303, RFC 4511, RFC 5246, RFC 6379, X.509

File metadata

Author Gerrit Kruitbosch
Creation date D:20181206143336-05'00'
Modification date D:20181206143336-05'00'
Pages 22
Creator Microsoft® Word 2016
Producer Microsoft® Word 2016

Heuristics

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3339,
  "dgst": "4cf84afda7c7875b",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA#2713",
        "Triple-DES#2593",
        "CVL#1580",
        "Triple-DES#2587",
        "AES#5020",
        "ECDSA#1285",
        "CVL#1579",
        "RSA#2714",
        "SHS#4088",
        "HMAC#3344",
        "AES#5030",
        "KTS#2593",
        "HMAC#3334",
        "CVL#1575",
        "AES#5029",
        "ECDSA#1286",
        "Triple-DES#2592",
        "CVL#1581",
        "DRBG#1836",
        "KTS#3344",
        "SHS#4089",
        "SHS#4079",
        "HMAC#3343"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:h:sonicwall:sma_7200:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:sonicwall:sma_6200:-:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "12.1.0",
        "12.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDSA": {
            "ECDSA": 7
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 2
          }
        },
        "RSA": {
          "RSA 1024": 1,
          "RSA 2048": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 9
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 6
        },
        "GCM": {
          "GCM": 13
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 3
        },
        "IPsec": {
          "IPsec": 6
        },
        "SSH": {
          "SSH": 11
        },
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 21
          }
        },
        "VPN": {
          "VPN": 6
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "KEX": {
          "Key Exchange": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-160": 1,
          "P-256": 8,
          "P-384": 4
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 4,
          "#12": 3,
          "#2": 4,
          "#3": 2,
          "#4": 2,
          "#5": 2,
          "#6": 2,
          "#7": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 5020": 1,
          "AES 5030": 1,
          "AES [197": 3,
          "AES-128": 7,
          "AES-256": 9,
          "DRBG 7": 1,
          "DRBG 8": 1,
          "DRBG 9": 1,
          "DRBG10": 1,
          "HMAC 3334": 4,
          "HMAC 3343": 2,
          "HMAC 3344": 4,
          "HMAC SHA-384": 1,
          "HMAC [198": 3,
          "HMAC-SHA- 1": 4,
          "HMAC-SHA-1": 16,
          "HMAC-SHA-112": 2,
          "HMAC-SHA-256": 10,
          "HMAC-SHA-256 128": 4,
          "HMAC-SHA-38411": 4,
          "HMAC-SHA-96": 2,
          "PKCS #12": 4,
          "RSA 1024": 1,
          "RSA 2048": 1,
          "SHA-1": 17,
          "SHA-256": 23,
          "SHA-384": 12,
          "SHA-38415": 3,
          "SHA-512": 1,
          "SHA-51214": 3,
          "SHA1": 1,
          "SHA256": 4,
          "SHS [180": 3
        }
      },
      "fips_security_level": {},
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 17,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-256": 23,
            "SHA-384": 12,
            "SHA-512": 1,
            "SHA256": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 11
        },
        "RNG": {
          "RNG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 32,
          "FIPS 180-4": 1,
          "FIPS 186-4": 2,
          "FIPS 197": 1,
          "FIPS 198-1": 1
        },
        "NIST": {
          "SP 800-133": 1,
          "SP 800-135": 1,
          "SP 800-38A": 1,
          "SP 800-38D": 1,
          "SP 800-38F": 1,
          "SP 800-52": 1,
          "SP 800-67": 1,
          "SP 800-90": 1,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS #12": 2
        },
        "RFC": {
          "RFC 2865": 2,
          "RFC 4254": 1,
          "RFC 4303": 2,
          "RFC 4511": 2,
          "RFC 5246": 2,
          "RFC 6379": 2
        },
        "X509": {
          "X.509": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 11,
            "AES-128": 7,
            "AES-256": 9
          },
          "RC": {
            "RC4": 1
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 11
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 20,
            "HMAC-SHA-256": 9
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA2561": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_RSA_WITH_3DES_EDE_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_RSA_WITH_AES_256_CBC_SHA256": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Gerrit Kruitbosch",
      "/CreationDate": "D:20181206143336-05\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2016",
      "/ModDate": "D:20181206143336-05\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2016",
      "pdf_file_size_bytes": 1591787,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 22
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "fec71e51c006158329414fdd7f6ff34e0fdafa3f5a4006a9cb20a4b6f55dba50",
    "policy_txt_hash": "ea856a60979f8de0d224d4d83f35412227eca08d2696c65ef4f24ab46658a21b"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/Dec2018Cert.pdf",
    "date_sunset": null,
    "description": "SonicWall Software SMA 6200, SMA 7200 and SRA EX9000 are part of the SonicWall Security Solution Enterprise product family. They provide hardware appliance based VPN Virtual Private Network mobile access solutions to a wide variety of end user devices including Microsoft Windows, Apple OSX, Linux, Apple iOS, Google Android and Google Chromebook among others.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "12.1.0-04493",
    "historical_reason": "SP 800-56Arev3 transition",
    "hw_versions": "EX-9000, SMA 6200 and SMA 7200",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "SonicWALL SMA Series v12.1 EX-9000, SMA 6200, SMA 7200",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-12-10",
        "lab": "CYGNACOM SOLUTIONS INC",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2020-04-19",
        "lab": "CYGNACOM SOLUTIONS INC",
        "validation_type": "Update"
      }
    ],
    "vendor": "SonicWall, Inc.",
    "vendor_url": "http://www.sonicwall.com"
  }
}