StoneGate Firewall / VPN Core

Certificate #1263

Webpage information

Status historical
Historical reason RNG SP800-131A Revision 1 Transition
Validation dates 16.02.2010
Standard FIPS 140-2
Security level 1
Type Firmware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Tested: StoneGate FW-1020 hardware with Debian GNU/Linux 4.0 (Linux kernel 2.6.17.13)
Description StoneGate Firewall/VPN Core 4.2.2.5798.cc3.1 provides IPsec compliant VPN connectivity between two firewall clusters (site to site connectivity) and remote IPsec compliant VPN connectivity between VPN clients the firewall cluster.
Version (Firmware) 4.2.2.5708.cc3.1
Vendor Stonesoft Corporation
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, DES, Triple-DES
Asymmetric Algorithms
Diffie-Hellman, DSA
Hash functions
SHA-1, MD5
Schemes
MAC, Key exchange, Key Exchange, Key agreement
Protocols
SSH, TLS, IKE, IKEv1, IPsec, VPN
Randomness
PRNG, RNG
Libraries
OpenSSL

Security level
level 1

Standards
FIPS 140-2, FIPS 186-2, FIPS 197, FIPS 46-3, FIPS 180-2, FIPS 198, PKCS#1, PKCS#3, RFC 2401, RFC 2246

File metadata

Creation date D:20100120125128+02'00'
Modification date D:20100217075539-05'00'
Pages 43
Creator Acrobat PDFMaker 8.1 for Word
Producer Acrobat Distiller 8.2.0 (Windows)

References

Incoming
  • 2471 - historical - SUSE Linux Enterprise Server 12 - OpenSSH Server Module
  • 2472 - historical - SUSE Linux Enterprise Server 12 - OpenSSH Client Module

Heuristics

No heuristics are available for this certificate.

References

Loading...

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1263,
  "dgst": "51e1424eeb514560",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Triple-DES#772",
        "AES#984",
        "DSA#340",
        "HMAC#554",
        "SHS#953",
        "RNG#559",
        "RSA#474"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "4.2.2.5708",
        "3.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "2471",
          "2472"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "2471",
          "2472"
        ]
      },
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "Diffie-Hellman": 8
          },
          "DSA": {
            "DSA": 11
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 77
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 39,
          "IKEv1": 1
        },
        "IPsec": {
          "IPsec": 54
        },
        "SSH": {
          "SSH": 10
        },
        "TLS": {
          "TLS": {
            "TLS": 33
          }
        },
        "VPN": {
          "VPN": 12
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 2
        },
        "KEX": {
          "Key Exchange": 1,
          "Key exchange": 2
        },
        "MAC": {
          "MAC": 2
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#340": 1,
          "#474": 1,
          "#554": 1,
          "#559": 1,
          "#772": 1,
          "#953": 1,
          "#984": 3
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES-128": 3,
          "AES-192": 2,
          "AES-256": 2,
          "HMAC- SHA-1": 1,
          "HMAC-SHA-1": 22,
          "HMAC-SHA1": 1,
          "HMAC-SHA1 18": 1,
          "PKCS#1": 2,
          "PKCS#3": 2,
          "SHA-1": 9
        }
      },
      "fips_security_level": {
        "Level": {
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 9
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 1
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 56,
          "FIPS 180-2": 1,
          "FIPS 186-2": 1,
          "FIPS 197": 3,
          "FIPS 198": 1,
          "FIPS 46-3": 1
        },
        "PKCS": {
          "PKCS#1": 1,
          "PKCS#3": 1
        },
        "RFC": {
          "RFC 2246": 1,
          "RFC 2401": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 2,
            "AES-128": 3,
            "AES-192": 2,
            "AES-256": 2
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 3
          },
          "DES": {
            "DES": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Company": "Stonesoft Corp.",
      "/CreationDate": "D:20100120125128+02\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 8.1 for Word",
      "/ModDate": "D:20100217075539-05\u002700\u0027",
      "/Producer": "Acrobat Distiller 8.2.0 (Windows)",
      "/SourceModified": "D:20100120104001",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 383767,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.bitkeeper.com/",
          "http://www.stonesoft.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 43
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "759fa5d110429fed6e7a86d7577a047f0cb9f785569c062a08286b864434b789",
    "policy_txt_hash": "c3210d6926404e31dde6cbd68a33ae5000d27134583d3b4db2860a546585aa03"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt1263.pdf",
    "date_sunset": null,
    "description": "StoneGate Firewall/VPN Core 4.2.2.5798.cc3.1 provides IPsec compliant VPN connectivity between two firewall clusters (site to site connectivity) and remote IPsec compliant VPN connectivity between VPN clients the firewall cluster.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Tested: StoneGate FW-1020 hardware with Debian GNU/Linux 4.0 (Linux kernel 2.6.17.13)"
    ],
    "fw_versions": "4.2.2.5708.cc3.1",
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "StoneGate Firewall / VPN Core",
    "module_type": "Firmware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2010-02-16",
        "lab": "BT",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Stonesoft Corporation",
    "vendor_url": "http://www.stonesoft.com"
  }
}