{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "966243b9a39f6dde", "cert_id": 5378, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Trellix Intrusion Prevention System Sensor NS3600", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-07-08", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.trellix.com", "vendor": "Trellix", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Roles, services, and authentication: Level 2", "Software/Firmware security: Level 2", "Non-invasive security: N/A", "Sensitive security parameter management: Level 2", "Life-cycle assurance: Level 2", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The NS3600 is an Intrusion Prevention System (IPS) and Intrusion Detection System (IDS) designed for network protection against zero-day, DoS/DDoS, encrypted and SYN Flood attacks, and real-time prevention of threats like spyware, malware, VoIP vulnerabilities, phishing, botnets, network worms, Trojans, and peer-to-peer applications. The Trellix Intrusion Prevention system Sensors (Trellix IPS sensor) connect with the Trellix Intrusion Prevention System Manager Appliances (Trellix IPS Manager-may be referred to as Manager in this document). The Trellix IPS Manager is used to manage and push configuration data and policies to the Sensors. Communication between Manager and Sensors uses secure channels that protect the traffic from disclosure and modification. Authorized administrators may access the Trellix IPS Manager via a GUI (over HTTPS) or a CLI (via SSH or a serial console connection). Sensors may be accessed via CLI (via SSH or a serial console connection) for initial setup. Once initial setup is complete, all management occurs via the Manager.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-07-07", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 6, "Level 2": 2}}, "fips_certlike": {"Certlike": {"HMAC-SHA-256": 2, "HMAC-SHA-512": 2, "SHA2-256": 16, "SHA-1": 14, "SHA2- 512": 12, "SHA2-384": 5, "SHA2-512": 13, "SHA3-256": 2, "SHA1": 4, "SHA2": 3, "SHA3-512": 1, "SHA2- 256": 14, "SHA- 1": 1, "SHA- 256": 2, "SHA- 512": 1, "SHA2- 384": 1, "SHA-384": 1, "SHA-256": 3, "RSA 2048": 7, "RSA PKCS1": 3, "PKCS1": 9, "PKCS 1": 6, "PKCS#1": 2, "AES-256": 2, "AES-128": 2, "AES 128/256": 2, "AES 128, 256": 4, "AES 128": 3, "AES- 256": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 2, "AES-128": 2, "AES": 26, "AES-": 10}, "CAST": {"CAST": 24}, "RC": {"RC4": 2}}, "DES": {"DES": {"DES": 1}, "3DES": {"Triple-DES": 2}}, "constructions": {"MAC": {"HMAC": 17, "HMAC-SHA-256": 1, "HMAC-SHA-512": 1}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 7}, "ECC": {"ECDH": {"ECDH": 2}, "ECDSA": {"ECDSA": 42}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 14, "SHA1": 4}, "SHA2": {"SHA-384": 1, "SHA-256": 3, "SHA2": 3}, "SHA3": {"SHA3-256": 2, "SHA3-512": 1}}, "MD": {"MD5": {"MD5": 16}}}, "crypto_scheme": {"MAC": {"MAC": 3}, "KA": {"Key Agreement": 7}}, "crypto_protocol": {"SSH": {"SSH": 284, "SSHv2": 3}, "TLS": {"TLS": {"TLS v1.2": 7, "TLS 1.2": 21, "TLS": 116}}}, "randomness": {"PRNG": {"DRBG": 47}, "RNG": {"RNG": 3, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 5}, "CTR": {"CTR": 2}, "CFB": {"CFB": 1}, "GCM": {"GCM": 11}}, "ecc_curve": {"NIST": {"P-256": 56, "P-384": 14, "P-521": 12}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 1}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 10}, "IBM": {"SSC": 9}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 41, "FIPS186-5": 43, "FIPS 186-5": 21, "FIPS 198-1": 2, "FIPS 180-4": 5, "FIPS 202": 1, "FIPS1": 10}, "NIST": {"SP 800-38A": 2, "SP 800-38D": 1, "SP 800-90A": 1, "SP 800-56A": 1, "SP 800-135": 4, "NIST SP 800-90B": 2}, "PKCS": {"PKCS1": 6, "PKCS 1": 3, "PKCS#1": 1}, "RFC": {"RFC7627": 3, "RFC5288": 1, "RFC5647": 1, "RFC7": 2}, "ISO": {"ISO/IEC 19790:2012": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1115334, "pdf_is_encrypted": false, "pdf_number_of_pages": 102, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260706074210-04'00'", "/ModDate": "D:20260706074210-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.acumensecurity.net/", "https://docs.trellix.com/", "http://www.trellix.com/", "https://csrc.nist.gov/projects/cryptographic-module-validation-program"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA2-384A3350", "RSA KeyGen (FIPS186-5)A3350", "AES-ECBA3350", "HMAC-SHA2-512A3350", "ECDSA SigVer (FIPS186-5)A3350", "ECDSA KeyVer (FIPS186-5)A3350", "SHA3-256A3303", "AES-GCMA3350", "SHA2-256A3353", "SHA-1A3350", "SHA2-512A3350", "ECDSA SigGen (FIPS186-5)A3350", "KDF SSHA3351", "KAS-ECC-SSC Sp800-56Ar3A3350", "Counter DRBGA3350", "RSA SigVer (FIPS186-5)A3353", "ECDSA KeyGen (FIPS186-5)A3350", "AES-CFB128A3350", "TLS v1.2 KDF RFC7627A3352", "HMAC-SHA2-256A3350", "RSA SigGen (FIPS186-5)A3350"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "3fb6098a0e9806e1fc685e7b161a793bc61d5cd6c45e4ce98d77c838de54e79e", "txt_hash": "65de98ae6fc310cd29421b2954e2965d80a6d74a8d7e7a622dc84e0a2a0c66b3", "json_hash": null}}}