Cisco 881W and Cisco 881GW Integrated Services Routers (ISRs)
Cisco 881W and Cisco 881GW Integrated Services Routers (ISRs), from Cisco Systems, Inc., holds FIPS 140-2 certificate #1700 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 1700 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Cisco Systems, Inc. · website |
| Hardware versions | 881W and 881GW with [FIPS Kit (CISCO-FIPS-KIT=), Revision -B0] |
| Firmware versions | Router Firmware Version: IOS 15.1(3)T2 and AP Firmware Version: 12.4(25d)JA1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Cisco 881W and Cisco 881GW Integrated Services Routers (ISR) provide connectivity and security services in a single, secure device. These routers offer broadband speeds and simplified management to small businesses, and enterprise small branch and teleworkers. The module is also a wireless access point that provide secure wireless access to clients.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
Approved algorithms (7)
| Algorithm | CAVP certificates |
|---|---|
| AES | 962, 1535, 1791, 1792, 1793 |
| DRBG | 129 |
| HMAC | 537, 1056, 1057 |
| RNG | 950 |
| RSA | 896 |
| SHS | 933, 1574, 1575 |
| Triple-DES | 757, 1160 |
Other algorithms
DES; HMAC-MD5; MD5; RC4; Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); GDOI (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength); AES (Cert. #1791, key wrapping; key establishment methodology provides 128 bits of encryption strength)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2012-03-28 | Initial | SAIC-VA |
| 2012-04-02 | Update | SAIC-VA |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2012-03-28, 2012-04-02