808bits

McAfee Web Gateway WG5000 and WG5500 Appliances

FIPS 140-2 certificate #1645 · McAfee, Inc. · data as of 2026-10-21

McAfee Web Gateway WG5000 and WG5500 Appliances, from McAfee, Inc., holds FIPS 140-2 certificate #1645 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with the tamper evident seals and opacity baffles installed and initializing the module as specified in Section 3.1 of the Security Policy

Certificate

Certificate number1645
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorMcAfee, Inc. · website
Hardware versions5000 [1] and 5500 [2]; EWG-5000-FIPS-KIT [1] and EWG-5500-FIPS-KIT [2]
Firmware versions7.1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The McAfee Web Gateway is a high-performance, enterprise-strength proxy security appliance family that provides the caching, authentication, administration, authorization controls and deep-level content security filtering required by today’s most demanding enterprises. McAfee Web Gateway WG5000 and WG5500 Appliances deliver scalable deployment flexibility and performance. McAfee Web Gateway WG5000 and WG5500 Appliances deliver comprehensive security for all aspects of Web 2.0 traffic.

Security level exceptions

  • Cryptographic Module Specification: Level 3
  • Design Assurance: Level 3

Approved algorithms (7)

AlgorithmCAVP certificates
AES1625, 1633
DSA511, 514
HMAC956, 960
RNG872, 875
RSA803, 807
SHS1434, 1438
Triple-DES1065, 1069

Other algorithms

MD4; MD5; RC4; DES; Diffie-Hellman (key agreement; key establishment methodology provides 80 bits of encryption strength; non-compliant); RSA (key wrapping; key establishment methodology provides 80 bits of encryption strength; non-compliant)

Validation history

DateTypeLab
2011-12-15InitialEWA - Canada
2012-01-17Update
2012-08-24UpdateEWA - Canada
2012-08-24UpdateEWA - Canada

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2011-12-15, 2012-01-17, 2012-08-24, 2012-08-24

Source documents