FortiGate-1000A and FortiGate-3600
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 1161 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Fortinet, Inc. · website |
| Hardware versions | FortiGate 1000A (build C4WA49) and FortiGate 3600 (build C4KW75) |
| Firmware versions | FortiOS 3.0, build8931, 081110 |
Module description
FortiGate Multi-Threat Security Solutions are dedicated, hardware-based devices that deliver complete content protection against blended threats at the network perimeter or within the internal network.
Security level exceptions
- Cryptographic Module Ports and Interfaces: Level 3
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 925, 926, 475, 476 |
| HMAC | 516, 517, 232, 233 |
| RNG | 530 |
| RSA | 449 |
| SHS | 909, 910, 543, 544 |
| Triple-DES | 742, 743, 489, 490 |
Other algorithms
DES; Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 201 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength); MD5; HMAC-MD5
Validation history
| Date | Type | Lab |
|---|---|---|
| 2009-07-29 | Initial | DOMUS |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2009-07-29