Secure File Transfer Appliance
Secure File Transfer Appliance, from Accellion, Inc., holds FIPS 140-2 certificate #1166 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 1166 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Accellion, Inc. · website |
| Hardware versions | P/N ACFIPS-01 Version 1.0.0 |
| Firmware versions | FTA_8_0_3, FTA_8_0_136 and FTA_8_0_488 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Accellion Secure File Transfer Appliance is a key component of Accellion's secure file transfer solution that enables enterprises an easy to use solution for securely transferring large files. It helps eliminate FTP servers and offload file attachments from email resulting in improved email performance and reduced email storage. Extensive tracking and reporting tools enable companies to demonstrate compliance with SOX, HIPAA, FDA, and GLB regulations. Accellion appliances provide the highest level of security and ease of use of any enterprise file transfer solution.
Security level exceptions
- Roles, Services, and Authentication: Level 3
Approved algorithms (5)
Other algorithms
Triple-DES (Cert. #771, key wrapping; key establishment methodology provides 80 bits of encryption strength; non-compliant); AES (Cert. #845, key wrapping; key establishment methodology provides 128 or 256 bits of encryption strength); Blowfish; MD5; RSA (key wrapping; key establishment methodology provides 80 bits of encryption strength; non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2009-08-18 | Initial | UL Verification Services, Inc. |
| 2009-10-02 | Update | |
| 2010-12-08 | Update | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2009-08-18, 2009-10-02, 2010-12-08