{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "6c4c237fa6808f1c", "cert_id": 5564, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "FortiOS 7.2/7.4", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-29", "validation_type": "Initial", "lab": "Lightship Security, Inc."}], "vendor_url": "http://www.fortinet.com", "vendor": "Fortinet, Inc.", "certificate_pdf_url": null, "module_type": "Firmware-Hybrid", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Sections 2 and 11 of the Security Policy", "exceptions": ["Roles, services, and authentication: Level 3", "Non-invasive security: N/A", "Life-cycle assurance: Level 2"], "embodiment": "MultiChipStand", "description": "The FortiOS 7.2/7.4 is a firmware based operating system that runs exclusively on Fortinet's FortiGate/FortiWiFi product family. The FortiOS provides integrated firewall, VPN, antivirus, antispam, intrusion prevention, content filtering and traffic shaping and HA capabilities.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-28", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 14, "HMAC-SHA-2": 8, "SHA2-224": 8, "SHA2-256": 20, "SHA2-384": 9, "SHA2-512": 9, "SHA-1": 12, "SHA3-256": 4, "SHA-2": 2, "SHA-3": 2, "AES-256": 4, "AES-128": 1, "AES-192": 1, "DRBG 256": 1, "DRBG 384": 1, "DRBG 128": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 4, "AES-128": 1, "AES-192": 1, "AES": 2}, "CAST": {"CAST": 50}}, "constructions": {"MAC": {"HMAC": 1}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 29}, "ECDSA": {"ECDSA": 42}}, "FF": {"DH": {"Diffie-Hellman": 4, "DHE": 1, "DH": 35}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 12}, "SHA2": {"SHA-2": 2}, "SHA3": {"SHA3-256": 4, "SHA-3": 2}}}, "crypto_scheme": {"MAC": {"MAC": 13}, "AEAD": {"AEAD": 1}}, "crypto_protocol": {"SSH": {"SSH": 36, "SSHv2": 1}, "TLS": {"SSL": {"SSL": 2}, "TLS": {"TLS 1.2": 18, "TLS v1.2": 2, "TLS v1.3": 2, "TLS 1.3": 18, "TLS": 22}}, "IKE": {"IKEv1": 9, "IKEv2": 11, "IKE": 35}, "IPsec": {"IPsec": 18}, "VPN": {"VPN": 18}}, "randomness": {"PRNG": {"DRBG": 37}, "RNG": {"RBG": 2}}, "cipher_mode": {"CBC": {"CBC": 14}, "GCM": {"GCM": 14}}, "ecc_curve": {"NIST": {"P-256": 14, "P-384": 10, "P-521": 10}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 15}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 12, "FIPS 140": 1, "FIPS186-5": 19, "FIPS 186-5": 11, "FIPS186-4": 6, "FIPS 186-4": 1, "FIPS 198-1": 5, "FIPS 180-4": 1, "FIPS 202": 1, "FIPS140-3": 1}, "NIST": {"SP 800-38A": 2, "SP 800-38D": 1, "SP 800-90A": 1, "SP 800-56A": 3, "SP 800-135": 5, "SP 800-186": 1}, "RFC": {"RFC7627": 1, "RFC 8446": 1, "RFC 4106": 1, "RFC 5282": 1, "RFC 7296": 1, "RFC 5647": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1152640, "pdf_is_encrypted": false, "pdf_number_of_pages": 66, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20261022161001-04'00'", "/ModDate": "D:20261022161001-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://blog.fortinet.com/", "https://docs.fortinet.com/", "https://www.fortinet.com/contact", "https://www.fortinet.com/doc/legal/EULA.pdf", "https://wwww.fortiguard.com/", "https://video.fortinet.com/", "https://docs.fortinet.com/document/fortigate/7.2.8/administration-guide/954635/getting-started", "https://csrc.nist.gov/projects/cryptographic-module-validation-program", "https://www.fortinet.com/support-and-training/training.html", "https://training.fortinet.com/", "https://www.fortinet.com/products", "https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/954635/getting-started", "https://support.fortinet.com/", "https://fortiguard.com/"]}}, "module_algorithms": {"_type": "Set", "elements": ["Safe Primes Key GenerationA6644", "SHA-1A6644", "SHA2-384A6644", "TLS v1.2 KDF RFC7627A6644", "KDF IKEv2A6644", "SHA3-256A4977", "RSA SigGen (FIPS186-5)A6644", "SHA2-224A6644", "SHA2-512A6644", "KDF IKEv1A6644", "ECDSA SigVer (FIPS186-5)A6644", "SHA2-256A6644", "HMAC-SHA2-384A6644", "HMAC-SHA2-224A6644", "HMAC-SHA2-512A6644", "ECDSA KeyGen (FIPS186-5)A6644", "KAS-ECC-SSC Sp800-56Ar3A6644", "AES-GCMA6630", "HMAC-SHA2-256A6644", "RSA KeyGen (FIPS186-5)A6644", "Counter DRBGA6642", "AES-CBCA6644", "KAS-FFC-SSC Sp800-56Ar3A6644", "ECDSA SigVer (FIPS186-4)A2240", "ECDSA SigGen (FIPS186-4)A2240", "TLS v1.3 KDFA6644", "ECDSA SigGen (FIPS186-5)A6644", "KDF SSHA6644", "HMAC-SHA-1A6644", "RSA SigVer (FIPS186-5)A6644"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A6630", "#A6644", "#A2240", "#A6642", "#A4977", "#A6641", "#A6643"]}, "is_br1_format": true, "br1_deviations": 2, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "3"}, {"section": "5", "title": "Software/Firmware security", "level": "1"}, {"section": "6", "title": "Operational environment", "level": "1"}, {"section": "7", "title": "Physical security", "level": "1"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "2"}, {"section": "12", "title": "Mitigation of other attacks", "level": "1"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"packageFileName": "FGT_601F-v7.2.8FIPS-CC-72-4-build9543- FORTINET.out", "swFwVersion": "FIPS-CC-72-4 (7.2)", "features": "", "integrityTest": "Signature verification"}, {"packageFileName": "FGT_601F-v7.4.4.FIPS-CC-74-2-build8537.out", "swFwVersion": "FIPS-CC-74-2 (7.4)", "features": "", "integrityTest": "Signature verification"}]}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "FortiAccelerator", "hwVersion": "CP9-NP7", "fwVersion": "-", "processors": "-", "features": "Integrated into motherboard of host device"}]}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"operatingSystem": "FortiOS", "hardwarePlatform": "FortiGate 601F", "processors": "Intel Xeon E- 2386G", "paa_pai": "No", "hypervisorHostOs": "-", "version": "FIPS-CC-72-4 (7.2) FIPS-CC-74-2 (7.4)"}, {"operatingSystem": "Operating System", "hardwarePlatform": "Hardware Platform", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-40F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-40F-3G4G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-60E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-60E-DSL", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-60E-DSLJ", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-60E-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-60F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-61E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "Operating System", "hardwarePlatform": "Hardware Platform", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-61F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-70F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-71F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-80E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-80E-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-80F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-80F-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-80F-BYPASS", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-81E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-81E-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-81F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-81F-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-90E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-91E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-100E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-100EF", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-100F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-101E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-101F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-140E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-140E-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-200E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-201E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-200F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-201F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-300E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-301E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-400F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-400E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-400E-BYPASS", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-401E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-401F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-401E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-500E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-501E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-600E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-601E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-800D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-900D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "Operating System", "hardwarePlatform": "Hardware Platform", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-900G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-901G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1000D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1000F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1001F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1100E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1100E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1101E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1101E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1500D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1500D-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1500DT", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1800F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1801F-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-1801F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-2000E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-2200E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-2201E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-2500E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-2600F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-2601F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-2601F-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3000D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3000F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3001F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3100D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3100D-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3200F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3201F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3200D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3200D-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3300E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3301E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3400E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3400E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3401E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3401E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3500F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3501F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "Operating System", "hardwarePlatform": "Hardware Platform", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3600E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3600E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3601E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3700D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3700D-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3700F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3701F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3960E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3960E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3980E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-3980E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4200F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4201F-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4201F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4400F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4401F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4401F-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4800F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-4801F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-5001E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-5001E1", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-6300F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-6301F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-6500F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-6501F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-7081F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-7081F-2", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-7121F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-7121F-2", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-Rugged-60F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-Rugged-70F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-Rugged-70F-3G4G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiGate-Rugged-60F-3G4G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-40F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-40F-3G4G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-60E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-60E-DSL", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-60E-DSLJ", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-60F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "Operating System", "hardwarePlatform": "Hardware Platform", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-61E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-61F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-80F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-81F-DSL", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-81F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-81F-3G4G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FortiWifi-81F-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FPM-7620F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FIM-7921F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.2", "hardwarePlatform": "FIM-7941F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-40F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-40F-3G4G", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-60E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-60E-DSL", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-60E-DSLJ", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-60E-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-60F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-61E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-61F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-70F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-71F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-80E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-80E-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-80F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-80F-DSL", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-80F-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-80F-BYPASS", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-81E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-81E-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-81F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-81F-POE", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-90E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-91E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-100E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-100EF", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-100F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-101E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-101F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-140E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "Operating System", "hardwarePlatform": "Hardware Platform", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-2601F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-2601F-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3000D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3000F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3001F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3100D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3100D-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3200F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3201F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3200D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3200D-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3300E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3301E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3400E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3400E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3401E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3401E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3500F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3501F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3600E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3600E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3601E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3700D", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3700D-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3700F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3701F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3960E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3960E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3980E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-3980E-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4200F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4201F-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4201F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4400F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4401F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4401F-DC", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4800F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-4801F", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-5001E", "processors": "", "paa_pai": "", "hypervisorHostOs": "", "version": ""}]}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-5001E1"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-6300F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-6301F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-6500F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-6501F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-7081F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-7081F-2"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-7121F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-7121F-2"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-Rugged-60F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-Rugged-70F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-Rugged-70F-3G4G"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiGate-Rugged-60F-3G4G"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-40F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-40F-3G4G"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-60E"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-60E-DSL"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-60E-DSLJ"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-60F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-61E"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-61F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-80F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-81F-DSL"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-81F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-81F-3G4G"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FortiWifi-81F-POE"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FPM-7620F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FIM-7921F"}, {"operatingSystem": "FortiOS 7.4", "hardwarePlatform": "FIM-7941F"}]}, "modes_of_operation": {"section": 2, "subsection": 4, "found": false, "entries": []}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC", "cavpCertName": "A2240, A6641, A6642, A6643, A6644", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CBC", "cavpCertName": "A6630", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-GCM", "cavpCertName": "A2240, A6630", "properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 16, 128, 136, 256, 264 AAD Length - AAD Length: 0, 128, 136, 256", "reference": "SP 800-38D"}, {"algorithm": "Counter DRBG", "cavpCertName": "A6641, A6642", "properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0-256 Increment 256 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0-256 Increment 256 Returned Bits - 256", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "ECDSA KeyGen (FIPS186-5)", "cavpCertName": "A6643, A6644", "properties": "Curve - P-256, P-384, P-521 Secret Generation Mode - extra bits, testing candidates", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigGen (FIPS186-4), ECDSA SigVer (FIPS186-4)", "cavpCertName": "A2240", "properties": "Curve - P-256 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA SigGen (FIPS186-5)", "cavpCertName": "A6643, A6644", "properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Component - No", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigVer (FIPS186-5)", "cavpCertName": "A6643, A6644", "properties": "Component - No Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-5"}, {"algorithm": "HMAC-SHA-1", "cavpCertName": "A2240, A6630, A6643, A6644", "properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 8-1024 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-224", "cavpCertName": "A6643, A6644", "properties": "MAC - MAC: 32-224 Increment 8 Key Length - Key Length: 8-1024 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-256", "cavpCertName": "A6630, A6643, A6644", "properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 8-1024 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-384", "cavpCertName": "A6630, A6643, A6644", "properties": "MAC - MAC: 32-384 Increment 8 Key Length - Key Length: 8-1024 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-512", "cavpCertName": "A6630, A6643, A6644", "properties": "MAC - MAC: 32-512 Increment 8 Key Length - Key Length: 8-1024 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "KAS-ECC-SSC Sp800-56Ar3", "cavpCertName": "A6643, A6644", "properties": "Domain Parameter Generation Methods - P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KAS-FFC-SSC Sp800-56Ar3", "cavpCertName": "A6643, A6644", "properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KDF IKEv1 (CVL)", "cavpCertName": "A6643, A6644", "properties": "Authentication Method - Digital Signature, Pre-shared Key, Public Key Encryption Initiator Nonce Length - Initiator Nonce Length: 64-2048 Increment 8 Responder Nonce Length - Responder Nonce Length: 64-2048 Increment 8 Diffie-Hellman Shared Secret Length - Diffie-Hellman Shared Secret Length: 224- 8192 Increment 8 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512 Preshared Key Length - Preshared Key Length: 8-8192 Increment 8", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "KDF IKEv2 (CVL)", "cavpCertName": "A6643, A6644", "properties": "Initiator Nonce Length - Initiator Nonce Length: 64-128 Increment 8 Responder Nonce Length - Responder Nonce Length: 64-128 Increment 8 Diffie-Hellman Shared Secret Length - Diffie-Hellman Shared Secret Length: 224- 8192 Increment 8 Derived Keying Material Length - Derived Keying Material Length: 160-16384 Increment 8 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "KDF SSH (CVL)", "cavpCertName": "A6643, A6644", "properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "RSA KeyGen (FIPS186-5)", "cavpCertName": "A2240", "properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 p mod 8 - 0 Primality Tests - 2powSecStr q mod 8 - 0 Fixed Public Exponent - Info Generated By Server - Yes Private Key Format - standard Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "RSA KeyGen (FIPS186-5)", "cavpCertName": "A6643, A6644", "properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 p mod 8 - 0 Primality Tests - 2powSecStr q mod 8 - 0 Info Generated By Server - No Private Key Format - standard Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigGen (FIPS186-5)", "cavpCertName": "A2240", "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigGen (FIPS186-5)", "cavpCertName": "A6643, A6644", "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A2240", "properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Fixed Public Exponent - 010001 Public Exponent Mode - fixed", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A6643", "properties": "Hash Pair - Hash Algorithm - SHA2-256 Salt Length - 32 Mask Function - MGF1 Modulo - 2048, 3072, 4096 Signature Type - pss Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A6644", "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5 Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "Safe Primes Key Generation", "cavpCertName": "A6643, A6644", "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512", "cavpCertName": "A2240, A6630, A6643, A6644", "properties": "Message Length - Message Length: 0-65528 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA3-256", "cavpCertName": "A4977", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "TLS v1.2 KDF RFC7627 (CVL)", "cavpCertName": "A6643, A6644", "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "TLS v1.3 KDF (CVL)", "cavpCertName": "A6643, A6644", "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE", "reference": "SP 800-135 Rev. 1"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "FortiOS - N/A", "logicalInterface": "Data Input", "data": "Network traffic, passwords, user data, new firmware images, configuration data, configuration file"}, {"physicalPort": "FortiOS - N/A", "logicalInterface": "Data Output", "data": "Network traffic, configuration file"}, {"physicalPort": "FortiOS - N/A", "logicalInterface": "Control Input", "data": "Commands"}, {"physicalPort": "FortiOS - N/A", "logicalInterface": "Status Output", "data": "Module status and configuration information"}, {"physicalPort": "N/A", "logicalInterface": "Power", "data": "None"}, {"physicalPort": "FortiAccelerator - Ethernet", "logicalInterface": "Data Input", "data": "Network packets"}, {"physicalPort": "FortiAccelerator - Ethernet", "logicalInterface": "Data Output", "data": "Network packets"}, {"physicalPort": "FortiAccelerator - PCIe", "logicalInterface": "Data Input", "data": "Network traffic, new firmware images, configuration data, configuration file, certificates"}, {"physicalPort": "FortiAccelerator - PCIe", "logicalInterface": "Data Output", "data": "Network traffic, configuration file, CSRs"}, {"physicalPort": "FortiAccelerator - PCIe", "logicalInterface": "Control Output", "data": "Commands"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": true, "entries": [{"name": "IPSec", "description": "Establishing a secure connection over IPSec", "mechanism": "KAS-IPSec", "strength": "1 in 5.2x10^33", "perMinute": "1 in 6.6x10^24"}, {"name": "Password", "description": "Username and password", "mechanism": "Operator authentication", "strength": "1 in 2.8x10^15", "perMinute": "1 in 111262"}]}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Admin", "type": "Identity", "operatorType": "CO", "authMethodList": "Password"}, {"name": "User", "type": "Identity", "operatorType": "User", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Add/delete operator", "description": "Add or delete operator account", "indicator": "System Logs", "inputs": "User data", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Admin - Crypto officer password: Z"}, {"name": "Authenticate to Module", "description": "Crypto Officer authenticates to the module over CLI/GUI", "indicator": "System Logs", "inputs": "Password", "outputs": "Status", "secFunImpl": "Operator authentication", "rolesSspAccess": "User - Crypto officer password: W"}, {"name": "Backup/restore configuration file", "description": "Backup/restore configuration file", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "Configuration backup", "rolesSspAccess": "Admin - Configuration backup key: R,W,E - Configuration encryption key: E - Crypto officer password: None"}, {"name": "Connect the module to remote FortiAnalyzer for transferring module's local logs to FortiAnalyzer using TLS", "description": "Connect to FortiAnalyzer for log transfer via OFTP over TLS", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "KAS-TLS12 Random number CKG", "rolesSspAccess": "Admin - DH Peer Public Key: W,E,Z - DH Private Key: G,E,Z - DH Public Key: G,R,E,Z - DH-SS: G - DRBG Output: E - ECDH Peer Public Key : W,E,Z - ECDH Private Key : G,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- ECDH Public Key : G,R,E,Z - ECDH-SS: G - GCM-IV: G - TLS Client key: W,E,Z - TLS-PMS: G,E,Z - TLS-SAK: G - TLS-SEK: G - TLS12-MS: G,E,Z"}, {"name": "Connect to module remotely for web admin using SSH", "description": "The module offers authentication over console port", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "Entropy KAS-SSH Random number CKG", "rolesSspAccess": "Admin - DH Peer Public Key: W,E,Z - DH Private Key: G,E,Z - DH Public Key: G,R,E,Z - DH-SS: G - DRBG Output: E - ECDH Peer Public Key : W,E,Z - ECDH Private Key : G,E,Z - ECDH Public Key : G,R,E,Z - ECDH-SS: G - SSH client public key: W,E,Z - SSH server public key: R - SSH-EK: G - SSH-IK: G - SSH-SS: G,E,Z"}, {"name": "Connect to module remotely for web admin using TLS 1.2", "description": "The module offers authentication over TLS 1.2", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "KAS-TLS12 Random number CKG", "rolesSspAccess": "User - DH Peer Public Key: W,E,Z - DH Private Key: G,E,Z - DH Public Key: G,R,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- DH-SS: G - DRBG Output: E - ECDH Peer Public Key : W,E,Z - ECDH Private Key : G,E,Z - ECDH Public Key : G,R,E,Z - ECDH-SS: G - GCM-IV: G - TLS Client key: W,E,Z - TLS Server Public Key: R - TLS13-HS: G,E,Z - TLS13-HTS: G,E,Z - TLS13-MS: G,E,Z - TLS13-TK: G"}, {"name": "Connect to module remotely for web admin using TLS 1.3", "description": "The module offers authentication over TLS 1.3", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "KAS-TLS13 Random number CKG", "rolesSspAccess": "User - DH Peer Public Key: W,E,Z - DH Private Key: G,E,Z - DH Public Key: G,R,E,Z - DH-SS: G - DRBG Output: E - ECDH Peer Public Key : W,E,Z - ECDH Private Key : G,E,Z - ECDH Public Key : G,R,E,Z - ECDH-SS: G - GCM-IV: G - TLS Client key: W,E,Z - TLS Server Public Key: R - TLS-PMS: G,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- TLS-SAK: G - TLS-SEK: G - TLS12-MS: G,E,Z"}, {"name": "Enable approved mode of operation (Console only)", "description": "Enable approved mode of operation", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "Configuration integrity", "rolesSspAccess": "Admin - Configuration integrity key: E"}, {"name": "Enable/disable alternating bypass mode", "description": "Configure the IPSec VPN policies", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "Configuration integrity", "rolesSspAccess": "Admin - Configuration integrity key: E"}, {"name": "Establish IPsec connection", "description": "Establish IPsec connection", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "KAS-IPSec Random number CKG", "rolesSspAccess": "User - DH Peer Public Key: W,E,Z - DH Private Key: G,E,Z - DH Public Key: G,R,E,Z - DH-SS: G - DRBG Output: E - ECDH Peer Public Key : W,E,Z - ECDH Private Key : G,E,Z - ECDH Public Key : G,R,E,Z - ECDH-SS: G - IKE ECDSA Peer Public Key: W,E,Z - IKE ECDSA Public Key: R - IKE RSA Peer Public key: W,E,Z - IKE RSA Public Key: R - IKE-PSK: G,E - SKEYID: G,E,Z - SKEYID_a: G - SKEYID_e: G - SKEYSEED: G,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- SK_a: G - SK_e: G"}, {"name": "Execute FIPS-CC on-demand self- tests (console only)", "description": "Execute self tests manually", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "FW authentication", "rolesSspAccess": "Admin - Firmware update key: E"}, {"name": "Execute factory reset (disable approved mode, Console only)", "description": "Zeroise the module", "indicator": "System Reboot", "inputs": "Command", "outputs": "-", "secFunImpl": "None", "rolesSspAccess": "Admin - Configuration backup key: Z - Configuration encryption key: Z - Configuration integrity key: Z - Crypto officer password: Z - Firmware update key: Z - HA Encryption key: Z - HA Password: Z - IKE ECDSA Private Key: Z - IKE ECDSA Public Key: Z - IKE RSA Private Key: Z - IKE RSA Public Key: Z - IPSec Manual Authentication key: Z - IPsec Manual Encryption key: Z - SSH server private key: Z - SSH server public key: Z - TLS Server Private Key: Z - TLS Server Public Key: Z"}, {"name": "Execute firmware update", "description": "Execute firmware update", "indicator": "System Logs", "inputs": "FW image", "outputs": "Status", "secFunImpl": "FW authentication", "rolesSspAccess": "Admin - Firmware update key: E"}, {"name": "Format log disk (console only)", "description": "Format log disk", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Admin"}, {"name": "Generate CSR", "description": "Generate certificate signing request", "indicator": "System Logs", "inputs": "Command", "outputs": "CSR", "secFunImpl": "ECDSA CSR RSA CSR Random number CKG", "rolesSspAccess": "Admin - DRBG Output: E - IKE ECDSA Private Key: G,E - IKE ECDSA Public Key: G,R,E - IKE RSA Private Key: G,E - IKE RSA Public Key: G,R,E"}, {"name": "Generate entropy", "description": "Generate entropy for seeding the DRBG (Cannot be operator invoked)", "indicator": "Implicit", "inputs": "Command", "outputs": "Entropy", "secFunImpl": "Entropy", "rolesSspAccess": "Unauthenticated - Entropy input: G"}, {"name": "Generate random number", "description": "Generate random number for other module service (Cannot be operator invoked)", "indicator": "Implicit", "inputs": "Entropy", "outputs": "Random number", "secFunImpl": "Random number", "rolesSspAccess": "Unauthenticated - DRBG Key: E - DRBG Output: G - DRBG Seed: G - DRBG V: E - Entropy input: E"}, {"name": "Key decrypt", "description": "Decryption of static keys used for authentication in network protocols. Decryption of previously established IPSec pre shared key. (Cannot be operator invoked)", "indicator": "Implicit", "inputs": "-", "outputs": "-", "secFunImpl": "Key decrypt", "rolesSspAccess": "Admin - Configuration encryption key: E - HA Encryption key: None - HA Password: None - IKE ECDSA Private Key: None - IKE ECDSA Public Key: None - IKE RSA Private Key: None - IKE RSA Public Key: None"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- IKE-PSK: None - IPSec Manual Authentication key: None - SSH server private key: None - SSH server public key: None"}, {"name": "Key encrypt", "description": "Encryption of the pre-shared key used for reestablishing IPSec tunnels. (Cannot be operator invoked)", "indicator": "Implicit", "inputs": "-", "outputs": "-", "secFunImpl": "Key encrypt", "rolesSspAccess": "User - Configuration encryption key: E - IKE-PSK: None"}, {"name": "Modify operator preferences", "description": "Modify operator preferences", "indicator": "System Logs", "inputs": "User data", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Admin"}, {"name": "Read log data", "description": "Read log data", "indicator": "System Logs", "inputs": "Command", "outputs": "Log data", "secFunImpl": "None", "rolesSspAccess": "Admin"}, {"name": "Read/set/delete/modify HA configuration", "description": "Configure the module's high availability ports", "indicator": "System Logs", "inputs": "Configuration data", "outputs": "Status", "secFunImpl": "Configuration integrity", "rolesSspAccess": "Admin - Configuration integrity key: E - HA Encryption key: W - HA Password: W"}, {"name": "Read/set/delete/modify IPSec/SSL VPN configuration", "description": "Configure the module's VPN", "indicator": "System Logs", "inputs": "Configuration data", "outputs": "Status", "secFunImpl": "Configuration integrity", "rolesSspAccess": "Admin - IPSec Manual Authentication key: W - IPsec Manual Encryption key: W"}, {"name": "Read/set/delete/modify configuration", "description": "Configure the module", "indicator": "System Logs", "inputs": "Configuration data", "outputs": "Status", "secFunImpl": "Configuration integrity", "rolesSspAccess": "Admin"}, {"name": "Set/reset operator password", "description": "Sets or resets an operator password", "indicator": "System Logs", "inputs": "Command, password", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Admin - Crypto officer password: W"}, {"name": "Show approved mode enabled (console/cli only)", "description": "Display the module's mode", "indicator": "System Logs", "inputs": "Command", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Admin"}, {"name": "Show system status", "description": "Show system status", "indicator": "Status displayed via CLI/GUI", "inputs": "Command", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Admin"}, {"name": "Show version", "description": "Display the version of the module", "indicator": "Status displayed via CLI/GUI", "inputs": "Command", "outputs": "Status", "secFunImpl": "None", "rolesSspAccess": "Admin"}, {"name": "Traffic over HTTP", "description": "Traffic over HTTP", "indicator": "Implicit", "inputs": "HTTP request", "outputs": "HTTP data", "secFunImpl": "Transfer data with GCM Transfer data with CBC", "rolesSspAccess": "User - GCM-IV: E - TLS-SAK: E - TLS-SEK: E - TLS13-TK: E"}, {"name": "Traffic over IPsec", "description": "Traffic over IPsec", "indicator": "Implicit", "inputs": "Traffic data", "outputs": "Traffic data", "secFunImpl": "Transfer data with GCM Transfer data with CBC", "rolesSspAccess": "User - GCM-IV: E - IPSec Manual Authentication key: E - IPsec Manual Encryption key: E - SKEYID_a: E - SKEYID_e: E - SK_a: E - SK_e: E"}, {"name": "Traffic over SSH", "description": "Traffic over SSH", "indicator": "Implicit", "inputs": "SSH Command", "outputs": "Status", "secFunImpl": "Transfer data with GCM Transfer data with CBC", "rolesSspAccess": "Admin - GCM-IV: E - SSH-EK: E - SSH-IK: E"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": false, "entries": []}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "Firmware", "description": "Embedded in the firmware image and stored in flash memory of host device", "persistance": "Static"}, {"name": "FortiAccelerator", "description": "SDRAM available to FortiAccelerator component", "persistance": "Dynamic"}, {"name": "RAM", "description": "SRDAM of host device", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Password", "source": "External network device", "dest": "RAM", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Preloaded", "source": "Manufacturer", "dest": "Firmware", "format": "Plaintext", "distribution": "N/A", "entry": "N/A", "sfiAlgo": ""}, {"name": "Public Key export", "source": "RAM", "dest": "External network device", "format": "Plaintext", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Public Key import", "source": "External network device", "dest": "RAM", "format": "Plaintext", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Transfer", "source": "RAM", "dest": "FortiAccelerator", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Return", "source": "FortiAccelerator", "dest": "RAM", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Auto", "description": "Automatic zeroisation of SSPs that are no longer needed.", "rationale": "Memory is overwritten with 0's", "operatorId": "N/A"}, {"method": "Reboot", "description": "Power-cycle the host device", "rationale": "All RAM is zeroised by a power-cycle.", "operatorId": "Unplugging the device"}, {"method": "Service", "description": "Invoking the service to zeroise all SSPs in persistent storage. Causes an automatic reboot of the host device that zeroises all SSPs in volatile memory.", "rationale": "The CLI command overwrites the storage location keys with 0's, making them irretrievable", "operatorId": "Issue the CLI command : execute erase-disk"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "Configuration integrity", "testProps": "HMAC-SHA2-256", "testMethod": "MAC", "type": "Critical Function", "indicator": "Console message", "details": "MAC verification"}, {"algorithmOrTest": "Firmware integrity", "testProps": "RSA 2048-bit, using SHA2-256", "testMethod": "SigVer", "type": "SW/FW Integrity", "indicator": "Console message", "details": "Signature verification"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-CBC (CP9)", "testProps": "128 & 256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Encrypt, decrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-CBC (NP7)", "testProps": "128 bit", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Encrypt, decrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-ECB (FW)", "testProps": "128 bit", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Encrypt, decrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-GCM (CP9)", "testProps": "128 & 256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Encrypt, decrypt", "condition": "On boot"}, {"algorithmOrTest": "AES-GCM (NP7)", "testProps": "128 bit", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Encrypt, decrypt", "condition": "On boot"}, {"algorithmOrTest": "APT", "testProps": "Adaptive proportion test", "testMethod": "FDT", "type": "CAST", "indicator": "Module Halt", "details": "On entropy source", "condition": "On generation"}, {"algorithmOrTest": "DH key pairs (FW)", "testProps": "-", "testMethod": "PCT", "type": "PCT", "indicator": "Console message", "details": "Sign, verify", "condition": "On key generation"}, {"algorithmOrTest": "DRBG (FW)", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Instantiate, generate, reseed", "condition": "On boot"}, {"algorithmOrTest": "EC DH key pairs (FW)", "testProps": "-", "testMethod": "PCT", "type": "PCT", "indicator": "Console message", "details": "Sign, verify, calculate public key", "condition": "On key generation"}, {"algorithmOrTest": "ECDSA (FW)", "testProps": "P-256, P-384, P-521", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Sign, verify", "condition": "On boot"}, {"algorithmOrTest": "ECDSA key pairs (FW)", "testProps": "-", "testMethod": "PCT", "type": "PCT", "indicator": "Console message", "details": "Sign verify, calculate public key", "condition": "On key generation"}, {"algorithmOrTest": "Firmware load (FW)", "testProps": "RSA 2048-bit with SHA-1 or SHA2-256", "testMethod": "SigVer", "type": "SW/FW Load", "indicator": "Console message", "details": "-", "condition": "On FW load"}, {"algorithmOrTest": "HMAC-SHA-1 (CP9)", "testProps": "SHA-1", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Generate", "condition": "On boot"}, {"algorithmOrTest": "HMAC-SHA-1 (NP7)", "testProps": "SHA-1", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Generate", "condition": "On boot"}, {"algorithmOrTest": "HMAC-SHA-2 (FW)", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Generate", "condition": "On boot"}, {"algorithmOrTest": "HMAC-SHA-2 (NP7)", "testProps": "SHA2-256, SHA2-384, SHA2-512", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Generate", "condition": "On boot"}, {"algorithmOrTest": "IKEv1 KDF (FW)", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Derive", "condition": "On boot"}, {"algorithmOrTest": "IKEv2 KDF (FW)", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Derive", "condition": "On boot"}, {"algorithmOrTest": "Jitter", "testProps": "-", "testMethod": "KAT", "type": "CAST", "indicator": "Successful boot", "details": "Generate", "condition": "On Jitter initialization"}, {"algorithmOrTest": "KAS-ECC-SSC (FW)", "testProps": "P-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Compute", "condition": "On boot"}, {"algorithmOrTest": "KAS-FFC-SSC (FW)", "testProps": "MODP-2048", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Compute", "condition": "On boot"}, {"algorithmOrTest": "RCT", "testProps": "Repetition count test", "testMethod": "FDT", "type": "CAST", "indicator": "Module Halt", "details": "On entropy source", "condition": "On generation"}, {"algorithmOrTest": "RSA (FW)", "testProps": "2048-bit", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Sign, verify", "condition": "On boot"}, {"algorithmOrTest": "RSA key pairs (FW)", "testProps": "-", "testMethod": "PCT", "type": "PCT", "indicator": "Console message", "details": "Sign, verify, encrypt, decrypt", "condition": "On key generation"}, {"algorithmOrTest": "SHA-1 (FW)", "testProps": "-", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Hash", "condition": "On boot"}, {"algorithmOrTest": "SHA-2 (FW)", "testProps": "SHA2-512", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Hash", "condition": "On boot"}, {"algorithmOrTest": "SHA-3 (FW)", "testProps": "SHA3-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Hash", "condition": "On boot"}, {"algorithmOrTest": "SSH KDF (FW)", "testProps": "SHA-1", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Derive", "condition": "On boot"}, {"algorithmOrTest": "TLS 1.2 KDF (FW)", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Derive", "condition": "On boot"}, {"algorithmOrTest": "TLS 1.3 KDF (FW)", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Console message", "details": "Derive", "condition": "On boot"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Error mode", "description": "All data output and cryptographic services are inhibited in the error state.", "conditions": "If any self- test fails", "recoveryMethod": "Power cycling", "indicator": "Self-tests failed Entering error mode... The system is going down NOW !! The system is halted"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["Safe Primes Key GenerationA6644", "SHA-1A6644", "SHA2-384A6644", "#A2240", "TLS v1.2 KDF RFC7627A6644", "#A6642", "KDF IKEv2A6644", "SHA3-256A4977", "RSA SigGen (FIPS186-5)A6644", "SHA2-224A6644", "#A6643", "SHA2-512A6644", "#A6630", "KDF IKEv1A6644", "#A6644", "ECDSA SigVer (FIPS186-5)A6644", "SHA2-256A6644", "HMAC-SHA2-384A6644", "HMAC-SHA2-224A6644", "HMAC-SHA2-512A6644", "ECDSA KeyGen (FIPS186-5)A6644", "KAS-ECC-SSC Sp800-56Ar3A6644", "AES-GCMA6630", "HMAC-SHA2-256A6644", "RSA KeyGen (FIPS186-5)A6644", "Counter DRBGA6642", "#A6641", "AES-CBCA6644", "KAS-FFC-SSC Sp800-56Ar3A6644", "ECDSA SigVer (FIPS186-4)A2240", "ECDSA SigGen (FIPS186-4)A2240", "TLS v1.3 KDFA6644", "ECDSA SigGen (FIPS186-5)A6644", "KDF SSHA6644", "HMAC-SHA-1A6644", "RSA SigVer (FIPS186-5)A6644", "#A4977"]}, "extracted_versions": {"_type": "Set", "elements": ["7.2", "7.4"]}, "cpe_matches": {"_type": "Set", "elements": ["cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:*"]}, "verified_cpe_matches": null, "related_cves": {"_type": "Set", "elements": ["CVE-2022-42475", "CVE-2024-26015", "CVE-2024-23111", "CVE-2023-47537", "CVE-2024-26007", "CVE-2024-45324", "CVE-2024-21762", "CVE-2022-42474", "CVE-2025-53847", "CVE-2023-22640", "CVE-2023-41677", "CVE-2023-37930", "CVE-2024-33510", "CVE-2024-46666", "CVE-2025-47890", "CVE-2026-59840", "CVE-2022-43953", "CVE-2023-29183", "CVE-2023-42785", "CVE-2024-46669", "CVE-2025-57740", "CVE-2025-53744", "CVE-2025-53843", "CVE-2022-39948", "CVE-2025-54821", "CVE-2023-50176", "CVE-2022-38380", "CVE-2026-71408", "CVE-2022-27491", "CVE-2023-48784", "CVE-2022-29053", "CVE-2025-43892", "CVE-2022-41328", "CVE-2023-36641", "CVE-2023-33308", "CVE-2025-67862", "CVE-2026-23573", "CVE-2024-50562", "CVE-2022-40684", "CVE-2024-23662", "CVE-2023-36555", "CVE-2022-45862", "CVE-2025-62826", "CVE-2025-25248", "CVE-2023-33306", "CVE-2024-52963", "CVE-2023-41675", "CVE-2023-27997", "CVE-2023-45583", "CVE-2022-29054", "CVE-2023-25610", "CVE-2023-28001", "CVE-2022-42469", "CVE-2025-68686", "CVE-2024-50565", "CVE-2025-25250", "CVE-2024-46665", "CVE-2024-23113", "CVE-2025-22862", "CVE-2022-45861", "CVE-2025-31514", "CVE-2022-41330", "CVE-2024-21754", "CVE-2024-26013", "CVE-2023-36639", "CVE-2024-40593", "CVE-2023-45586", "CVE-2022-30307", "CVE-2024-47569", "CVE-2024-50568", "CVE-2022-41327", "CVE-2023-29181", "CVE-2023-33305", "CVE-2023-46714", "CVE-2023-33301", "CVE-2023-45584", "CVE-2022-29055", "CVE-2024-46670", "CVE-2024-48886", "CVE-2026-24858", "CVE-2022-38378", "CVE-2023-42790", "CVE-2025-64157", "CVE-2023-47536", "CVE-2023-42789", "CVE-2024-40591", "CVE-2025-31366", "CVE-2026-59839", "CVE-2025-54822", "CVE-2023-33307", "CVE-2024-47570", "CVE-2024-26011", "CVE-2022-23439", "CVE-2025-58413", "CVE-2022-41335", "CVE-2024-36504", "CVE-2022-42476", "CVE-2025-24471", "CVE-2025-62675", "CVE-2023-42786", "CVE-2021-43080", "CVE-2023-41841", "CVE-2023-46718", "CVE-2024-55599", "CVE-2025-25249", "CVE-2025-55018", "CVE-2025-62631", "CVE-2024-35279", "CVE-2024-26006", "CVE-2022-43947", "CVE-2023-46717", "CVE-2025-22252", "CVE-2023-44250", "CVE-2023-29175", "CVE-2025-58903", "CVE-2024-54021", "CVE-2022-35843", "CVE-2023-36640", "CVE-2024-48884", "CVE-2025-24477", "CVE-2026-59837", "CVE-2024-23110", "CVE-2025-61624", "CVE-2022-26122", "CVE-2025-47294", "CVE-2023-22639", "CVE-2023-46720", "CVE-2023-37935", "CVE-2022-35842", "CVE-2022-41334", "CVE-2023-46715", "CVE-2025-53844", "CVE-2024-36505", "CVE-2025-47295", "CVE-2024-23112", "CVE-2022-41329", "CVE-2024-26010", "CVE-2024-26008", "CVE-2024-46668", "CVE-2025-59718", "CVE-2022-42472", "CVE-2023-29179", "CVE-2023-26207", "CVE-2023-40721", "CVE-2023-28002", "CVE-2023-29180", "CVE-2025-25253", "CVE-2023-22641", "CVE-2023-29178"]}, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "275b17ecf6e65e4516508ec00e0735960376b481e19a46574e840c36c1d1bdfa", "txt_hash": "521fe6e343212a7fdf58225fe91a57b3dc75ba241ab30f9cc3f3a4982f8073ca", "json_hash": "0d7c412e72741d65a41a1c9cfd50cad7f2c93867a9818ce1bad53b3651440215"}}}