This page was not yet optimized for use on mobile devices.
Juniper Networks SRX300, SRX320, SRX340, SRX345, SRX345-DUAL-AC, SRX550M, SRX5400, SRX5600 and SRX5800 Services Gateways
Certificate details
| Certificate ID | #4663 |
|---|---|
| Status | historical |
| Historical reason | Moved to historical list due to sunsetting |
| Validation dates | 28.11.2023 |
| Standard | FIPS 140-2 |
| Security level | 2 |
| Type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in FIPS mode, installed, initialized and configured as specified in Sections 1.2 and 5 of the Security Policy |
| Exceptions |
|
| Description | The Juniper Networks SRX Series Services Gateways are a series of secure routers that provide essential capabilities to connect, secure, and manage work force locations sized from handfuls to hundreds of users. By consolidating fast, highly available switching, routing, security, and applications capabilities in a single device, enterprises can economically deliver new services, safe connectivity, and a satisfying end user experience. |
| Version (Hardware) | [SRX300, SRX320, SRX340, SRX345, SRX345-DUAL-AC, SRX550M, SRX5400, SRX5600 and SRX5800] with JNPR-FIPS-TAMPER-LBLS |
| Version (Firmware) | JUNOS OS 19.2R1 |
| Vendor | Juniper Networks, Inc http://www.juniper.net |
| Lab | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, CAST, Triple-DES, TDES, TDEA, Blowfish, HMAC, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512Asymmetric Algorithms
RSA 2048, RSA 4096, RSA 3072, ECDH, ECDSA, ECC, DH, Diffie-Hellman, DSAHash functions
SHA-1, SHA-256, SHA-384, SHA-512, MD5Schemes
Key Exchange, Key Agreement, AEADProtocols
SSH, SSHv2, IKE, IKEv2, IKEv1, IPsec, VPNRandomness
DRBG, RNGLibraries
OpenSSLElliptic Curves
P-256, P-384, P-521, P-512Block cipher modes
CBC, CTR, GCMSecurity level
Level 2, level 2, level 1Standards
FIPS 140-2, FIPS140-2, FIPS PUB 140-2, SP 800-67, SP 800-135, SP 800-90A, SP 800-131A, SP 800-56A, RFC4106, RFC 4253, X.509Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
- cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*
- cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4663,
"dgst": "731c883e561fe35d",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES#C1129",
"HMAC#C1085",
"SHS#C1085",
"#C1111",
"#C1085",
"RSA#C1110",
"HMAC#C1109",
"HMAC#C1129",
"AES#C1107",
"ECDSA#C1151",
"#C1109",
"AES#C1109",
"DRBG#C1079",
"HMAC#C1052",
"AES#C1085",
"SHS#C1079",
"HMAC#C1106",
"DRBG#C1107",
"CVL#C1085",
"KTS#C1107",
"CVL#C1084",
"#C1129",
"ECDSA#C1085",
"SHS#C1107",
"SHS#C1106",
"#C1079",
"HMAC#C1107",
"DRBG#C1106",
"SHS#C1109",
"CVL#C1113",
"SHS#C1084",
"Triple-DES#C1129",
"#C1052",
"Triple-DES#C1084",
"AES#C1084",
"RSA#C1107",
"RSA#C1151",
"HMAC#C1079",
"SHS#C1129",
"Triple-DES#C1085",
"CVL#C1111",
"ECDSA#C1107",
"#C1107",
"#C1084",
"DRBG#C1084",
"HMAC#C1084",
"SHS#C1052",
"Triple-DES#C1109",
"Triple-DES#C1107",
"DRBG#C1085"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
"cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"19.2"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 44,
"br1_tables": null,
"is_br1_format": false,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 10
},
"ECDSA": {
"ECDSA": 27
}
},
"FF": {
"DH": {
"DH": 16,
"Diffie-Hellman": 9
},
"DSA": {
"DSA": 3
}
},
"RSA": {
"RSA 2048": 14,
"RSA 3072": 2,
"RSA 4096": 4
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 20
},
"CTR": {
"CTR": 2
},
"GCM": {
"GCM": 15
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 2
}
},
"crypto_protocol": {
"IKE": {
"IKE": 33,
"IKEv1": 8,
"IKEv2": 10
},
"IPsec": {
"IPsec": 30
},
"SSH": {
"SSH": 35,
"SSHv2": 3
},
"VPN": {
"VPN": 1
}
},
"crypto_scheme": {
"AEAD": {
"AEAD": 4
},
"KA": {
"Key Agreement": 5
},
"KEX": {
"Key Exchange": 2
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 52,
"P-384": 22,
"P-512": 2,
"P-521": 14
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES CBC 128/192/256": 8,
"AES GCM 19": 1,
"DRBG 2": 1,
"HMAC SHA-1": 1,
"HMAC SHA-256": 5,
"HMAC-SHA- 256": 8,
"HMAC-SHA- 384 25": 8,
"HMAC-SHA-1": 4,
"HMAC-SHA-1- 96": 2,
"HMAC-SHA-256": 6,
"HMAC-SHA-384": 2,
"HMAC-SHA-512": 2,
"HMAC-SHA1- 96": 4,
"RSA 2048": 14,
"RSA 3072": 2,
"RSA 4096": 4,
"SHA 1, 256": 1,
"SHA 256": 18,
"SHA 384": 2,
"SHA 512": 1,
"SHA-1": 11,
"SHA-256": 17,
"SHA-384": 5,
"SHA-512": 3
}
},
"fips_security_level": {
"Level": {
"Level 2": 2,
"level 1": 1,
"level 2": 1
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 1
}
},
"SHA": {
"SHA1": {
"SHA-1": 11
},
"SHA2": {
"SHA-256": 22,
"SHA-384": 3,
"SHA-512": 3
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 15
},
"RNG": {
"RNG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-2": 7,
"FIPS PUB 140-2": 1,
"FIPS140-2": 1
},
"NIST": {
"SP 800-131A": 3,
"SP 800-135": 3,
"SP 800-56A": 1,
"SP 800-67": 4,
"SP 800-90A": 7
},
"RFC": {
"RFC 4253": 1,
"RFC4106": 2
},
"X509": {
"X.509": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 37
},
"CAST": {
"CAST": 1
}
},
"DES": {
"3DES": {
"TDEA": 1,
"TDES": 3,
"Triple-DES": 33
}
},
"constructions": {
"MAC": {
"HMAC": 37,
"HMAC-SHA-256": 3,
"HMAC-SHA-384": 1,
"HMAC-SHA-512": 1
}
},
"miscellaneous": {
"Blowfish": {
"Blowfish": 1
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES#C1129",
"HMAC#C1085",
"SHS#C1085",
"RSA#C1110",
"HMAC#C1109",
"HMAC#C1129",
"AES#C1107",
"ECDSA#C1151",
"AES#C1109",
"DRBG#C1079",
"HMAC#C1052",
"AES#C1085",
"SHS#C1079",
"HMAC#C1106",
"DRBG#C1107",
"CVL#C1085",
"KTS#C1107",
"CVL#C1084",
"ECDSA#C1085",
"SHS#C1107",
"SHS#C1106",
"HMAC#C1107",
"DRBG#C1106",
"SHS#C1109",
"CVL#C1113",
"SHS#C1084",
"Triple-DES#C1129",
"Triple-DES#C1084",
"AES#C1084",
"RSA#C1107",
"RSA#C1151",
"HMAC#C1079",
"SHS#C1129",
"Triple-DES#C1085",
"CVL#C1111",
"ECDSA#C1107",
"DRBG#C1084",
"HMAC#C1084",
"SHS#C1052",
"Triple-DES#C1109",
"Triple-DES#C1107",
"DRBG#C1085"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#C1111",
"#C1085",
"#C1129",
"#C1109",
"#C1107",
"#C1084",
"#C1079",
"#C1052"
]
},
"policy_metadata": {
"/CreationDate": "D:20231120155927-05\u002700\u0027",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId": "15f92b67-224a-415d-a546-8cebb245dcaf",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Application": "Microsoft Azure Information Protection",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled": "True",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Extended_MSFT_Method": "Automatic",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name": "Juniper Business Use Only",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Owner": "[email protected]",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate": "2019-06-28T05:46:17.5561117Z",
"/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId": "bea78b3c-4cdb-4130-854a-1d193232e5f4",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ActionId": "4d5b3dfd-af97-4f3c-ab52-629a9500ec32",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ContentBits": "0",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Enabled": "true",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Method": "Privileged",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Name": "Unrestricted",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SetDate": "2023-11-20T20:59:02Z",
"/MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SiteId": "b64da4ac-e800-4cfc-8931-e607f720a1b8",
"/ModDate": "D:20231120155927-05\u002700\u0027",
"pdf_file_size_bytes": 4059214,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://www.juniper.net/assets/us/en/local/pdf/datasheets/1000254-en.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31482",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31449",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31503",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31504",
"http://www.juniper.net/assets/us/en/local/pdf/datasheets/1000550-en.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31548",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31507",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31476",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31508",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31481",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31506",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31526",
"https://www.juniper.net/documentation/en_US/release-independent/junos/information-products/pathway-pages/hardware/SRX550/srx550-hm-index.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 52
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "31eff0c72fd0c813be6ea48224df05dbf96f55230f8d4ec28d47297a75dd29c9",
"source_hash": "caf3c21e5714cee4f58ba3777902742e6a62d552ba0b0ec44db8ccf001d93171",
"txt_hash": "1fd3c5c98243a79e6d2f87c483b20318b209047aa8a10a21ffb7ca79d2a30481"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode, installed, initialized and configured as specified in Sections 1.2 and 5 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2023_111223_0648_signed.pdf",
"date_sunset": null,
"description": "The Juniper Networks SRX Series Services Gateways are a series of secure routers that provide essential capabilities to connect, secure, and manage work force locations sized from handfuls to hundreds of users. By consolidating fast, highly available switching, routing, security, and applications capabilities in a single device, enterprises can economically deliver new services, safe connectivity, and a satisfying end user experience.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Roles, Services, and Authentication: Level 3",
"Design Assurance: Level 3",
"Mitigation of Other Attacks: N/A"
],
"fw_versions": "JUNOS OS 19.2R1",
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": "[SRX300, SRX320, SRX340, SRX345, SRX345-DUAL-AC, SRX550M, SRX5400, SRX5600 and SRX5800] with JNPR-FIPS-TAMPER-LBLS",
"level": 2,
"mentioned_certs": {},
"module_name": "Juniper Networks SRX300, SRX320, SRX340, SRX345, SRX345-DUAL-AC, SRX550M, SRX5400, SRX5600 and SRX5800 Services Gateways",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2023-11-28",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Initial"
}
],
"vendor": "Juniper Networks, Inc",
"vendor_url": "http://www.juniper.net"
}
}