Check Point IP Appliance
Check Point IP Appliance, from Check Point Software Technologies Ltd., holds FIPS 140-2 certificate #1581 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 1581 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Check Point Software Technologies Ltd. · website |
| Hardware versions | IP290 (CPAP-IP295-D-GFIP [Nokia NBB0292000] and N431174001, CPAP-IP295-D-AC-DS [Nokia NBB0295000] and N431174001) and IP690 (CPAP-IP695-D-GFIP [Nokia NBB0692000], CPIP-A-4-1C and N431174001) |
| Firmware versions | IPSO v4.2 with Check Point VPN-1 NGX R65 with hot fix HFA-30 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Check Point IP Applicances are full-featured enterprise systems designed for small to medium enterprises, with Service Provider flexibility and rapid serviceability option in a single rack space. When combined with Check Point VPN-1 these platforms provide reliable, easy to manage distributed security and access.
Security level exceptions
- Design Assurance: Level 3
Approved algorithms (7)
| Algorithm | CAVP certificates |
|---|---|
| AES | 497, 709, 769, 342 |
| DSA | 202, 271 |
| HMAC | 248, 384, 251, 385, 499, 421, 146 |
| RNG | 275, 417, 277, 418 |
| RSA | 211, 332, 213, 333 |
| SHS | 564, 734, 567, 735, 883, 775, 417 |
| Triple-DES | 507, 637, 510, 638, 729, 669, 406 |
Other algorithms
CAST; DES; HMAC MD5; MD5; Arcfour; Twofish; Blowfish; Diffie-Hellman (key agreement, key establishment methodology provides between 112 and 128 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Triple-DES (K3 mode; non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2011-10-11 | Initial | CYGNACOM SOLUTIONS INC |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2011-10-11