{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "9401e925f19506af", "cert_id": 5301, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "WatchGuard Firebox T20, T20-W, T40, T40-W, T80, NV5, T25, T25-W, T45, T45-PoE, T45-W-PoE, T45-CW, T85-PoE, M290, M390, M590 and M690", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-03", "validation_type": "Initial", "lab": "Gossamer Security Solutions"}], "vendor_url": "http://www.watchguard.com", "vendor": "WatchGuard Technologies, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section Secure Operation in Section 11 of the Security Policy. The tamper evident seals installed as indicated in the Security Policy", "exceptions": ["Roles, services, and authentication: Level 3", "Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "WatchGuard\u00ae Firebox appliances are built for enterprise-grade performance with blazing throughput and numerous connectivity options. Advanced networking features include clustering, high availability (active/active), VLAN support, multi-WAN load balancing and enhanced VoIP security, plus inbound and outbound HTTPS inspection, to give the strong security enterprises need. And the Firebox appliances are completely configurable - turn on or off components and services to fit different network security deployment requirements.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-02", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#1": 1, "#5": 1}}, "fips_security_level": {"Level": {"Level 2": 4, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 62, "HMAC- SHA-1": 1, "SHA2-256": 36, "SHA2-384": 26, "SHA2- 512": 3, "SHA-1": 24, "SHA2-512": 22, "SHA3-256": 1, "RSA 2048": 1, "AES-256": 3, "AES-128": 4, "AES-192": 1, "AES256": 1, "AES 24": 1, "DRBG 384": 1}}, "vendor": {"NXP": {"NXP": 26}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 3, "AES-128": 4, "AES-192": 1, "AES": 30, "AES-": 6, "AES256": 1}, "CAST": {"CAST": 196}}, "DES": {"DES": {"DES": 10}, "3DES": {"Triple-DES": 6}}, "constructions": {"MAC": {"HMAC": 28}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 100}, "ECDSA": {"ECDSA": 93}, "ECC": {"ECC": 5}}, "FF": {"DH": {"Diffie-Hellman": 6, "DHE": 1, "DH": 111}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 24}, "SHA3": {"SHA3-256": 1}}, "MD": {"MD5": {"MD5": 9}}}, "crypto_scheme": {"MAC": {"MAC": 5}}, "crypto_protocol": {"SSH": {"SSH": 157, "SSHv2": 51}, "TLS": {"TLS": {"TLS": 196, "TLS v1.2": 6, "TLS v1.3": 6, "TLSv1.2": 3, "TLS 1.3": 2, "TLSv1.3": 1}}, "IKE": {"IKEv1": 5, "IKEv2": 7, "IKE": 3}, "IPsec": {"IPsec": 1}, "VPN": {"VPN": 18}}, "randomness": {"PRNG": {"DRBG": 102}, "RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 1}, "GCM": {"GCM": 10}}, "ecc_curve": {"NIST": {"P-256": 58, "P-384": 42, "P-521": 10, "Curve P-256": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 17}, "IBM": {"SSC": 7}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 13, "FIPS186-5": 38, "FIPS 186-5": 7, "FIPS 198-1": 40, "FIPS 180-4": 40}, "NIST": {"SP 800-38A": 11, "SP 800-38D": 10, "SP 800-90A": 1, "SP 800-56A": 3, "SP 800-135": 5, "SP 800-52": 1}, "RFC": {"RFC7627": 3, "RFC 5288": 1, "RFC8446": 2, "RFC 7296": 1, "RFC 4419": 2, "RFC 7919": 2, "RFC 3526": 2}, "ISO": {"ISO/IEC 19790": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "of the TELs as depicted below and any additional requirement per the site security policy which are out of scope of this Security Policy. Tamper evident labels shall be applied for the module to operate in an": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 3008833, "pdf_is_encrypted": false, "pdf_number_of_pages": 109, "/Author": "Hawes, David J. (Fed)", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "7125f93d,7adbb736,583254e6", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT", "/Comments": "", "/Company": "", "/CreationDate": "D:20260601120027-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "251f2f7a-9aea-472d-b4f6-7f2ded4ee0fe", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-06-01T15:23:33Z", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1", "/ModDate": "D:20260601120631-04'00'", "/Producer": "Adobe PDF Library 26.1.59", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": []}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["ECDSA KeyGen (FIPS186-5)A4397", "ECDSA SigGen (FIPS186-5)A4397", "AES-CTRA4397", "KDF IKEv1A4397", "KDF IKEv2A4397", "SHA2-512A4436", "ECDSA SigVer (FIPS186-5)A4397", "SHA2-384A4436", "TLS v1.2 KDF RFC7627A4397", "SHA2-256A4436", "RSA KeyGen (FIPS186-5)A4397", "KAS-ECC-SSC Sp800-56Ar3A4397", "AES-GCMA4436", "Safe Primes Key GenerationA4397", "TLS v1.3 KDFA4397", "KDF SSHA4397", "SHA-1A4436", "HMAC-SHA2-512A4436", "Counter DRBGA4397", "HMAC-SHA-1A4436", "RSA SigGen (FIPS186-5)A4397", "KAS-FFC-SSC Sp800-56Ar3A4397", "AES-CBCA4436", "HMAC-SHA2-384A4436", "HMAC-SHA2-256A4436", "RSA SigVer (FIPS186-5)A4397"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": {"_type": "Set", "elements": ["cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_t40-w:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_t20-w:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*"]}, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "1bab187f2227f298387546a7f228c6368f497927d073900a6c40c247eca9e4ec", "txt_hash": "894980cd03790d3a55c007238bd8bcc047695470196f271b84c6a34ea6d4397b", "json_hash": null}}}