This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	Juniper Networks SRX1500, SRX4100, SRX4200 and SRX4600 Services Gateways	Juniper Networks SRX1500, SRX4100, SRX4200 and SRX4600 Services Gateways
cert_id	3705	4664
dgst	d90e299c21eb42f1	e94e063888d213e0
heuristics/algorithms	Triple-DES#C1049, HMAC#C1049, RSA#C1045, Triple-DES#C1045, RSA#C1049, DRBG#C1045, AES#C1046, DRBG#C1044, Triple-DES#C1046, AES#C1049, SHS#C1044, AES#C1045, SHS#C1043, SHS#C1049, DRBG#C1049, HMAC#C1043, HMAC#C1045, SHS#C1045, ECDSA#C1049, CVL#C1050, ECDSA#C1045, CVL#C1049, HMAC#C1044, SHS#C1046, HMAC#C1046, KTS#C1049, CVL#C1045	Triple-DES#C1049, HMAC#C1049, RSA#C1045, Triple-DES#C1045, RSA#C1049, DRBG#C1045, AES#C1046, DRBG#C1044, Triple-DES#C1046, AES#C1049, SHS#C1044, AES#C1045, SHS#C1043, SHS#C1049, DRBG#C1049, HMAC#C1043, HMAC#C1045, SHS#C1045, ECDSA#C1049, CVL#C1050, ECDSA#C1045, CVL#C1049, HMAC#C1044, SHS#C1046, HMAC#C1046, KTS#C1049, CVL#C1045
heuristics/cpe_matches	cpe:2.3:h:juniper:srx4600:-:::::::, cpe:2.3:h:juniper:srx1500:-:::::::, cpe:2.3:h:juniper:srx4100:-:::::::, cpe:2.3:h:juniper:srx4200:-:::::::	cpe:2.3:h:juniper:srx4600:-:::::::, cpe:2.3:h:juniper:srx1500:-:::::::, cpe:2.3:h:juniper:srx4100:-:::::::, cpe:2.3:h:juniper:srx4200:-:::::::
heuristics/direct_transitive_cves	{}	{}
heuristics/extracted_versions	19.2	19.2
heuristics/indirect_transitive_cves	{}	{}
heuristics/module_processed_references/directly_referenced_by	{}	{}
heuristics/module_processed_references/directly_referencing	{}	{}
heuristics/module_processed_references/indirectly_referenced_by	{}	{}
heuristics/module_processed_references/indirectly_referencing	{}	{}
heuristics/module_prunned_references	{}	{}
heuristics/policy_processed_references/directly_referenced_by	{}	{}
heuristics/policy_processed_references/directly_referencing	{}	{}
heuristics/policy_processed_references/indirectly_referenced_by	{}	{}
heuristics/policy_processed_references/indirectly_referencing	{}	{}
heuristics/policy_prunned_references	{}	{}
heuristics/related_cves	{}	{}
heuristics/verified_cpe_matches	{}	{}
pdf_data/keywords/fips_cert_id	Cert: #1: 3 #10: 3 #11: 1 #12: 1 #13: 1 #15: 1 #2: 2 #3: 2 #4: 3 #5: 3 #6: 2 #7: 3 #8: 4 #9: 4	Cert: #1: 3 #10: 3 #11: 1 #12: 1 #13: 1 #15: 1 #2: 2 #3: 2 #4: 3 #5: 3 #6: 2 #7: 3 #8: 4 #9: 4
pdf_data/keywords/fips_security_level	Level: Level 1: 1 Level 2: 2 level 2: 1	Level: Level 1: 1 Level 2: 2 level 2: 1
pdf_data/keywords/fips_certlike	Certlike: # C1045: 1 # C1049: 2 AES CBC 128/192/256: 5 DES10: 1 DRBG 2: 1 HMAC SHA-1: 1 HMAC SHA-256: 5 HMAC-SHA-1: 4 HMAC-SHA-1-96: 2 HMAC-SHA-256: 12 HMAC-SHA-384: 2 HMAC-SHA-512: 2 HMAC-SHA1-96: 1 RSA 2048: 17 RSA 3072: 2 RSA 4096: 12 SHA 1, 256: 1 SHA 256: 12 SHA 384: 2 SHA 512: 1 SHA- 256: 1 SHA- 384: 1 SHA- 512: 1 SHA-1: 9 SHA-256: 16 SHA-384: 2 SHA-512: 2	Certlike: # C1045: 1 # C1049: 2 AES CBC 128/192/256: 5 DES9: 1 DRBG 2: 1 HMAC SHA-1: 1 HMAC SHA-256: 5 HMAC- SHA-1-96: 1 HMAC- SHA-256: 2 HMAC- SHA-256 10: 1 HMAC- SHA-384: 1 HMAC- SHA1-96: 1 HMAC-SHA-1: 4 HMAC-SHA-256: 6 HMAC-SHA-384: 2 HMAC-SHA-512: 2 RSA 2048: 16 RSA 3072: 2 RSA 4096: 10 SHA 1, 256: 1 SHA 256: 12 SHA 384: 2 SHA 512: 1 SHA- 256: 1 SHA- 384: 1 SHA- 512: 1 SHA-1: 10 SHA-1-96: 1 SHA-256: 19 SHA-384: 4 SHA-512: 3 SHA1-96: 1
pdf_data/keywords/vendor
pdf_data/keywords/eval_facility
pdf_data/keywords/symmetric_crypto	AES_competition: AES: AES: 28 CAST: CAST: 1 DES: 3DES: TDEA: 1 TDES: 3 Triple-DES: 32 DES: DES: 1 constructions: MAC: HMAC: 29 HMAC-SHA-256: 6 HMAC-SHA-384: 1 HMAC-SHA-512: 1 miscellaneous: Blowfish: Blowfish: 1	AES_competition: AES: AES: 28 CAST: CAST: 1 DES: 3DES: TDEA: 1 TDES: 3 Triple-DES: 32 DES: DES: 1 constructions: MAC: HMAC: 29 HMAC-SHA-256: 3 HMAC-SHA-384: 1 HMAC-SHA-512: 1 miscellaneous: Blowfish: Blowfish: 1
pdf_data/keywords/asymmetric_crypto	ECC: ECC: ECC: 2 ECDH: ECDH: 23 ECDSA: ECDSA: 25 FF: DH: DH: 10 Diffie-Hellman: 24 DSA: DSA: 3 RSA: RSA 2048: 17 RSA 3072: 2 RSA 4096: 12	ECC: ECC: ECC: 3 ECDH: ECDH: 9 ECDSA: ECDSA: 25 FF: DH: DH: 13 Diffie-Hellman: 9 DSA: DSA: 3 RSA: RSA 2048: 16 RSA 3072: 2 RSA 4096: 10
pdf_data/keywords/pq_crypto
pdf_data/keywords/hash_function	MD: MD5: MD5: 1 SHA: SHA1: SHA-1: 9 SHA2: SHA-256: 19 SHA-384: 2 SHA-512: 1	MD: MD5: MD5: 1 SHA: SHA1: SHA-1: 10 SHA2: SHA-256: 22 SHA-384: 4 SHA-512: 2
pdf_data/keywords/crypto_scheme	AEAD: AEAD: 3 KA: Key Agreement: 4 KEX: Key Exchange: 2	AEAD: AEAD: 3 KA: Key Agreement: 3 KEX: Key Exchange: 2
pdf_data/keywords/crypto_protocol	IKE: IKE: 30 IKEv1: 5 IKEv2: 8 IPsec: IPsec: 27 SSH: SSH: 44 VPN: VPN: 1	IKE: IKE: 30 IKEv1: 6 IKEv2: 9 IPsec: IPsec: 27 SSH: SSH: 35 VPN: VPN: 1
pdf_data/keywords/randomness	PRNG: DRBG: 19 RNG: RNG: 2	PRNG: DRBG: 19 RNG: RNG: 2
pdf_data/keywords/cipher_mode	CBC: CBC: 8 CTR: CTR: 2 GCM: GCM: 11	CBC: CBC: 8 CTR: CTR: 2 GCM: GCM: 11
pdf_data/keywords/ecc_curve	NIST: P-256: 50 P-384: 26 P-512: 2 P-521: 8	NIST: P-256: 46 P-384: 20 P-512: 2 P-521: 4
pdf_data/keywords/crypto_engine
pdf_data/keywords/tls_cipher_suite
pdf_data/keywords/crypto_library	OpenSSL: OpenSSL: 3	OpenSSL: OpenSSL: 3
pdf_data/keywords/vulnerability
pdf_data/keywords/side_channel_analysis
pdf_data/keywords/device_model
pdf_data/keywords/tee_name
pdf_data/keywords/os_name
pdf_data/keywords/cplc_data
pdf_data/keywords/ic_data_group
pdf_data/keywords/standard_id	FIPS: FIPS 140-2: 7 FIPS PUB 140-2: 1 FIPS140-2: 1 NIST: SP 800-131A: 9 SP 800-135: 2 SP 800-56A: 1 SP 800-67: 3 SP 800-90A: 7 RFC: RFC 2409: 1 RFC 4253: 1 RFC4106: 2 RFC5282: 1 RFC7296: 1 X509: X.509: 2	FIPS: FIPS 140-2: 7 FIPS PUB 140-2: 1 FIPS140-2: 1 NIST: SP 800-131A: 9 SP 800-135: 2 SP 800-67: 3 SP 800-90A: 7 RFC: RFC 2409: 1 RFC 4253: 1 RFC4106: 2 RFC5282: 1 RFC7296: 1 X509: X.509: 2
pdf_data/keywords/javacard_version
pdf_data/keywords/javacard_api_const
pdf_data/keywords/javacard_packages
pdf_data/keywords/certification_process
pdf_data/policy_metadata	/Author: tsengjk /CreationDate: D:20200731093103-04'00' /Creator: Nuance PDF Create /ModDate: D:20200731093115-04'00' /Producer: Nuance PDF Create /Title: Microsoft Word - Junos 19.2R1 SRX1500_4100_4200_SRX4600_Security_Policy.docx pdf_file_size_bytes: 1908147 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 35	/CreationDate: D:20231120160757-05'00' /MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ActionId: 6a692e55-8dd3-476c-98c1-17e47ba4343b /MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_ContentBits: 0 /MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Enabled: true /MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Method: Privileged /MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_Name: Unrestricted /MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SetDate: 2023-11-20T21:07:35Z /MSIP_Label_c968a81f-7ed4-4faa-9408-9652e001dd96_SiteId: b64da4ac-e800-4cfc-8931-e607f720a1b8 /ModDate: D:20231120160757-05'00' pdf_file_size_bytes: 1575923 pdf_hyperlinks: https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31441, https://www.juniper.net/assets/us/en/local/pdf/datasheets/1000551-en.pdf, https://www.juniper.net/assets/us/en/local/pdf/datasheets/1000628-en.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31443, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31440, https://teronlabs.sharepoint.com/sites/AISEF/Shared%20Documents/Consulting/Juniper%20(B190402)%20FIPS%20Junos%2019.2R1%20for%20SRX%20%20SL2/5%20-%20Working/Security%20Policy/SRX%20TVP/Junos%2019.2R1%20SRX1500_4100_4200_SRX4600_Security_Policy_v1.2-clean.docx#_Toc106224991, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31447, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31442, http://www.juniper.net/assets/de/de/local/pdf/datasheets/1000600-en.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31446 pdf_is_encrypted: False pdf_number_of_pages: 35
state/module_download_ok	True	True
state/module_extract_ok	True	True
state/policy_convert_garbage	False	False
state/policy_convert_ok	True	True
state/policy_download_ok	True	True
state/policy_extract_ok	True	True
state/policy_pdf_hash	Different	Different
state/policy_txt_hash	Different	Different
web_data/caveat	When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy	When operated in FIPS mode, installed, initialized and configured as specified in Section 1.2 and 6 of the Security Policy
web_data/certificate_pdf_url	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2020_011020_0703.pdf	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2023_111223_0648_signed.pdf
web_data/date_sunset		31.08.2025
web_data/description	The SRX1500, SRX4100, SRX4200 and SRX4600 Service Gateways offer outstanding protection, performance, scalability, availability, and integrated security services. Designed for high-performance security services architecture, and seamless integration of networking and security in a single platform, the SRX1500, SRX4100, SRX4200 and SRX 4600 are best suited for campuses, regional headquarters and enterprise data centers with a focus on application visibility and control, intrusion prevention, advanced threat protection, authentication, confidentiality of information, and integrated cloud-based security.	The SRX1500, SRX4100, SRX4200 and SRX4600 Service Gateways offer outstanding protection, performance, scalability, availability, and integrated security services. Designed for high-performance security services architecture, and seamless integration of networking and security in a single platform, the SRX1500, SRX4100, SRX4200 and SRX 4600 are best suited for campuses, regional headquarters and enterprise data centers with a focus on application visibility and control, intrusion prevention, advanced threat protection, authentication, confidentiality of information, and integrated cloud-based security.
web_data/embodiment	Multi-Chip Stand Alone	Multi-Chip Stand Alone
web_data/exceptions	Roles, Services, and Authentication: Level 3, Design Assurance: Level 3, Mitigation of Other Attacks: N/A	Roles, Services, and Authentication: Level 3, Design Assurance: Level 3, Mitigation of Other Attacks: N/A
web_data/fw_versions	J, U, N, O, S, , O, S, , 1, 9, ., 2, R, 1	J, U, N, O, S, , O, S, , 1, 9, ., 2, R, 1
web_data/historical_reason	SP 800-56Arev3 transition - replaced by certificate #4664
web_data/hw_versions	[, S, R, X, 1, 5, 0, 0, , S, Y, S, -, J, B, -, A, C, ,, , S, R, X, 1, 5, 0, 0, , S, Y, S, -, J, B, -, D, C, ,, , S, R, X, 4, 1, 0, 0, , S, Y, S, -, J, B, -, A, C, ,, , S, R, X, 4, 1, 0, 0, , S, Y, S, -, J, B, -, D, C, ,, , S, R, X, 4, 2, 0, 0, , S, Y, S, -, J, B, -, A, C, ,, , S, R, X, 4, 2, 0, 0, , S, Y, S, -, J, B, -, D, C, ,, , S, R, X, 4, 6, 0, 0, , (, A, C, ), ,, , S, R, X, 4, 6, 0, 0, , (, D, C, ), ], , w, i, t, h, , J, N, P, R, -, F, I, P, S, -, T, A, M, P, E, R, -, L, B, L, S	[, S, R, X, 1, 5, 0, 0, , S, Y, S, -, J, B, -, A, C, ,, , S, R, X, 1, 5, 0, 0, , S, Y, S, -, J, B, -, D, C, ,, , S, R, X, 4, 1, 0, 0, , S, Y, S, -, J, B, -, A, C, ,, , S, R, X, 4, 1, 0, 0, , S, Y, S, -, J, B, -, D, C, ,, , S, R, X, 4, 2, 0, 0, , S, Y, S, -, J, B, -, A, C, ,, , S, R, X, 4, 2, 0, 0, , S, Y, S, -, J, B, -, D, C, ,, , S, R, X, 4, 6, 0, 0, , (, A, C, ), ,, , S, R, X, 4, 6, 0, 0, , (, D, C, ), ], , w, i, t, h, , J, N, P, R, -, F, I, P, S, -, T, A, M, P, E, R, -, L, B, L, S
web_data/level	2	2
web_data/mentioned_certs
web_data/module_name	Juniper Networks SRX1500, SRX4100, SRX4200 and SRX4600 Services Gateways	Juniper Networks SRX1500, SRX4100, SRX4200 and SRX4600 Services Gateways
web_data/module_type	Hardware	Hardware
web_data/revoked_link	None	None
web_data/revoked_reason	None	None
web_data/standard	FIPS 140-2	FIPS 140-2
web_data/status	historical	active
web_data/sw_versions	None	None
web_data/tested_conf	[]	[]
web_data/validation_history	date: 01.09.2020 lab: LEIDOS CSTL validation_type: Initial	date: 28.11.2023 lab: LEIDOS CSTL validation_type: Initial
web_data/vendor	Juniper Networks, Inc	Juniper Networks, Inc
web_data/vendor_url	http://www.juniper.net	http://www.juniper.net