808bits

Juniper Networks SRX100, SRX210, SRX240 and SRX650 Services Gateways

FIPS 140-2 certificate #1478 · Juniper Networks, Inc. · data as of 2026-10-21

Juniper Networks SRX100, SRX210, SRX240 and SRX650 Services Gateways, from Juniper Networks, Inc., holds FIPS 140-2 certificate #1478 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: The tamper evident seals and security devices installed as indicated in the Security Policy

Certificate

Certificate number1478
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorJuniper Networks, Inc. · website
Hardware versionsSRX100B, SRX100H, SRX210B, SRX210H, SRX240B, SRX240H and SRX650-BASE-SRE6-645AP with JNPR-FIPS-TAMPER-LBLS
Firmware versions10.0R4

Module description

Quoted from the NIST CMVP entry for this certificate.

Juniper Networks SRX100, SRX210, SRX240 and SRX650 Services Gateways are secure routers that provide essential capabilities that connect, secure, and manage work force locations. By consolidating fast, highly available switching, routing, security, and applications capabilities in a single device, enterprises can economically deliver new services, safe connectivity, and a satisfying end user experience. Supports Firewall, IPsec VPN and IPS.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • EMI/EMC: Level 3
  • Design Assurance: Level 3

Approved algorithms (7)

AlgorithmCAVP certificates
AES1362, 1373
DSA440
HMAC798, 806
RNG748
RSA662
SHS1242, 1255
Triple-DES937, 948

Other algorithms

RSA (key wrapping; key establishment methodology provides 80 bits of encryption strength; non-compliant); Diffie-Hellman (key agreement; key establishment methodology provides 90 bits of encryption strength; non-compliant); MD5

Validation history

DateTypeLab
2011-01-05InitialICSA
2011-01-20UpdateICSA
2013-12-11Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2011-01-05, 2011-01-20, 2013-12-11

Source documents