VPN-1 [1] and Security Gateway with firewall and vpn Software Blades [2]
VPN-1 [1] and Security Gateway with firewall and vpn Software Blades [2], from Check Point Software Technologies Ltd., holds FIPS 140-2 certificate #1219 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 1219 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-chip standalone |
| Vendor | Check Point Software Technologies Ltd. · website |
| Firmware versions | NGX R65 with hot fix HFA 30 [1] and R70.1 [2] |
Module description
Quoted from the NIST CMVP entry for this certificate.
Check Point's Security Gateway Software Blades R70.1 and VPN-1 R65 with hot fix HFA 30 provide an integrated software solution combining a firewall, vpn, and the hardened SecurePlatform operating system. Designed to meet the requirements of Internet, intranet, and extranet vpns it provides secure connectivity to corporate networks with remote and mobile users, branch offices, and business partners.
Security level exceptions
- Roles, Services, and Authentication: Level 2
- Design Assurance: Level 2
- Tested: Dell PowerEdge 1750 and Power-1 5070 with Check Point SecurePlatform Operating System, version NGX R65 HFA 30
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 257, 1130, 1728 |
| HMAC | 67, 502, 642, 643, 1003, 1004 |
| RNG | 90, 628, 917 |
| RSA | 66, 132, 537, 853 |
| SHS | 332, 890, 1053, 1054, 1511, 1512 |
| Triple-DES | 338, 733, 824, 825, 1114, 1115 |
Other algorithms
CAST 40 bit; CAST 128 bit; DES (Cert. #314); MD5; HMAC-MD5; Diffie-Hellman (key agreement, key establishment methodology provides between 112 and 128 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping, key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2009-10-27 | Initial | CYGNACOM SOLUTIONS INC |
| 2009-11-20 | Update | |
| 2011-07-27 | Update | CYGNACOM SOLUTIONS INC |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2009-10-27, 2009-11-20, 2011-07-27