{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "953abe48dfdfa8e2", "cert_id": 5240, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "WatchGuard Firebox M4800 and M5800", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-04-13", "validation_type": "Initial", "lab": "Gossamer Security Solutions"}], "vendor_url": "http://www.watchguard.com", "vendor": "WatchGuard Technologies, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2026_010526_0732.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section Secure Operation in Section 11 of the Security Policy. The tamper evident seals installed as indicated in the Security Policy", "exceptions": ["Roles, services, and authentication: Level 3", "Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "WatchGuard\u00ae Firebox appliances are built for enterprise-grade performance with blazing throughput and numerous connectivity options. Advanced networking features include clustering, high availability (active/active), VLAN support, multi-WAN load balancing and enhanced VoIP security, plus inbound and outbound HTTPS inspection, to give the strong security enterprises need. And the Firebox appliances are completely configurable \u2013 turn on or off components and services to fit different network security deployment requirements.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-04-12", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#1": 1, "#5": 1}}, "fips_security_level": {"Level": {"Level 2": 4, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 8, "HMAC- SHA-1": 1, "SHA-1": 4, "SHA2-256": 11, "SHA2-384": 2, "SHA2-512": 2, "SHA3- 256": 1, "RSA 2048": 1, "AES-256": 1, "AES-128": 3, "AES256": 1, "AES 24": 1, "DRBG 384": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 30, "AES-": 6, "AES-256": 1, "AES-128": 3, "AES256": 1}, "CAST": {"CAST": 52}}, "DES": {"DES": {"DES": 8}, "3DES": {"Triple-DES": 6}}, "constructions": {"MAC": {"HMAC": 27}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 100}, "ECDSA": {"ECDSA": 92}, "ECC": {"ECC": 5}}, "FF": {"DH": {"DH": 111, "Diffie-Hellman": 4}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 4}}, "MD": {"MD5": {"MD5": 7}}}, "crypto_scheme": {"MAC": {"MAC": 5}}, "crypto_protocol": {"SSH": {"SSH": 157, "SSHv2": 51}, "TLS": {"TLS": {"TLS": 196, "TLS v1.2": 6, "TLS v1.3": 6, "TLSv1.2": 3, "TLS 1.3": 2, "TLSv1.3": 1}}, "IKE": {"IKEv1": 5, "IKEv2": 7, "IKE": 3}, "IPsec": {"IPsec": 1}, "VPN": {"VPN": 14}}, "randomness": {"PRNG": {"DRBG": 102}, "RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 1}, "GCM": {"GCM": 10}}, "ecc_curve": {"NIST": {"Curve P-256": 1, "P-256": 49, "P-384": 34, "P-521": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 17}, "IBM": {"SSC": 6}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 13, "FIPS186-5": 37, "FIPS 186-5": 7, "FIPS 198-1": 4, "FIPS 180-4": 4}, "NIST": {"SP 800-38A": 2, "SP 800-38D": 1, "SP 800-90A": 1, "SP 800-56A": 3, "SP 800-135": 5, "SP 800-52": 1}, "RFC": {"RFC7627": 3, "RFC 5288": 1, "RFC8446": 2, "RFC 7296": 1, "RFC 4419": 2, "RFC 7919": 2, "RFC 3526": 2}, "ISO": {"ISO/IEC 19790": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "of the TELs as depicted below and any additional requirement per the site security policy which are out of scope of this Security Policy. Tamper evident labels shall be applied for the module to operate in an": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 1486897, "pdf_is_encrypted": false, "pdf_number_of_pages": 84, "/Author": "Hawes, David J. (Fed)", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "443ddfd7,428d19f8,2265b40c", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT", "/Comments": "", "/Company": "", "/CreationDate": "D:20260413112650-04'00'", "/Creator": "Acrobat PDFMaker 25 for Word", "/Keywords": "", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "b77aa612-8394-487b-b747-ef5a98b1f8e6", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-04-01T14:32:05Z", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1", "/ModDate": "D:20260413112944-04'00'", "/Producer": "Adobe PDF Library 25.1.231", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": []}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["HMAC-SHA-1A4397", "RSA SigVer (FIPS186-5)A4397", "SHA2-384A4397", "ECDSA KeyGen (FIPS186-5)A4397", "ECDSA SigGen (FIPS186-5)A4397", "HMAC-SHA2-384A4397", "SHA-1A4397", "AES-CTRA4397", "HMAC-SHA2-256A4397", "KDF IKEv1A4397", "KDF IKEv2A4397", "ECDSA SigVer (FIPS186-5)A4397", "SHA2-512A4397", "TLS v1.2 KDF RFC7627A4397", "RSA KeyGen (FIPS186-5)A4397", "AES-CBCA4397", "KAS-ECC-SSC Sp800-56Ar3A4397", "Safe Primes Key GenerationA4397", "TLS v1.3 KDFA4397", "KDF SSHA4397", "Counter DRBGA4397", "AES-GCMA4397", "HMAC-SHA2-512A4397", "RSA SigGen (FIPS186-5)A4397", "KAS-FFC-SSC Sp800-56Ar3A4397", "SHA2-256A4397"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": {"_type": "Set", "elements": ["cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*", "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*"]}, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "89ab8feca17d8c909ceb20075f0a91663a3dbfd508c053dea74595e126819afc", "txt_hash": "414287074c327ef45b85c1d647b1a7f1f6d0136083f5cb3b4bd9f380b63eb021", "json_hash": null}}}