808bits

SiteProtector Cryptographic Module

FIPS 140-2 certificate #1402 · IBM Internet Security Systems, Inc. · data as of 2026-10-09

SiteProtector Cryptographic Module, from IBM Internet Security Systems, Inc., holds FIPS 140-2 certificate #1402 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number1402
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeSoftware
EmbodimentMulti-chip standalone
VendorIBM Internet Security Systems, Inc. · website
Software versions1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

IBM Proventia® Management SiteProtectorTM system is a security management system that provides centralized command and control, analysis, reporting and workflow for all ISS IBM Protection devices and select third-party security solutions including network IPS, Network Multi-Function, Server, Endpoint, Vulnerability Assessment, Application Assessment, and DLP. All of these IBM ISS security components have a common update and policy management system as well. The SiteProtector system provides an in-depth security event analysis capability that is specific to the needs of security analysts.

Approved algorithms (5)

AlgorithmCAVP certificates
AES1181
HMAC681
RNG652
RSA562
SHS1090

Other algorithms

RSA (key wrapping; key establishment methodology provides 96 bits of encryption strength; non-compliant)

Tested configurations

  • Microsoft Windows Server 2003 R2 Standard, Version 5.2 SP 2 on an IBM eServer 326m running on an AMD Opteron Processor 270

Validation history

DateTypeLab
2010-09-15InitialCOACT INC CAFE LAB
2011-12-07Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2010-09-15, 2011-12-07

Source documents