Check Point IP Appliance
Check Point IP Appliance, from Check Point Software Technologies Ltd., holds FIPS 140-2 certificate #1551 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 1551 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Check Point Software Technologies Ltd. · website |
| Hardware versions | IP390 (CPAP-IP395-D-GFIP [Nokia NBB0302000] and N431174001) and IP560 (CPAP-IP565-D-AC [Nokia NBB0562000] and CPIP-A-4-1C, CPIP-A-PCMCIA-CA, N431174001) |
| Firmware versions | IPSO v4.2 with Check Point VPN-1 NGX R65 with hot fix HFA-30 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Nokia VPN Applicances are full-featured enterprise systems designed for small to medium enterprises, with Service Provider flexibility and rapid serviceability option in a single rack space. When combined with Check Point VPN-1 these platforms provide reliable, easy to manage distributed security and access.
Security level exceptions
- Design Assurance: Level 3
Approved algorithms (7)
| Algorithm | CAVP certificates |
|---|---|
| AES | 397, 342, 442, 497 |
| DSA | 202, 204 |
| HMAC | 248, 251, 207, 208, 176, 146, 499 |
| RNG | 275, 277, 229, 230 |
| RSA | 211, 213, 215, 167 |
| SHS | 564, 567, 508, 509, 469, 417, 883 |
| Triple-DES | 507, 510, 465, 466, 435, 406, 729 |
Other algorithms
CAST; DES (Cert. #314); HMAC MD5; MD5; Arcfour; Twofish; Blowfish; Diffie-Hellman (key agreement; key establishment methodology provides between 112 bits and 128 bits of encryption strength; non-compliant less than112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Triple-DES (K3 mode; non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2011-07-21 | Initial | CYGNACOM SOLUTIONS INC |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2011-07-21