808bits

Brocade® FCX L2/L3 Switch and Brocade FastIron® SX Series L2/L3 Switch

FIPS 140-2 certificate #2141 · Brocade Communications Systems, Inc. · data as of 2026-10-21

Brocade® FCX L2/L3 Switch and Brocade FastIron® SX Series L2/L3 Switch, from Brocade Communications Systems, Inc., holds FIPS 140-2 certificate #2141 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode and with the tamper evident labels installed as indicated in the Security Policy

Certificate

Certificate number2141
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorBrocade Communications Systems, Inc. · website
Hardware versionsFI-SX800-S, FI-SX1600-AC, FI-SX1600-DC, FCX624S, FCX624S-HPOE-ADV, FCX624S-F-ADV, FCX648S, FCX648S-HPOE and FCX648S-HPOE-ADV with FIPS Kit (P/N Brocade XBR-000195)
Firmware versionsIronWare Release R07.3.00c

Module description

Quoted from the NIST CMVP entry for this certificate.

The 24-port and 48-port models of the Brocade FCX Series of switches support Power over Ethernet (PoE) and non-PoE applications. They are designed to meet today's enterprise campus and data center network wire-speed and non-blocking performance requirement. The FastIron SX Series extends control from the network edge to the core with intelligent network services, such as Quality of Service (QoS). The FastIron SX Series provides a scalable, secure, low-latency, and fault-tolerant IP services solution for 1 and 10 Gigabit Ethernet (GbE) enterprise deployments.

Security level exceptions

  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (7)

AlgorithmCAVP certificates
AES2150
DRBG239
DSA668
HMAC1317
RSA1106
SHS1871
Triple-DES1363

Other algorithms

MD5; HMAC-MD5; Diffie-Hellman (non-compliant); RSA (key wrapping; non-compliant)

Validation history

DateTypeLab
2014-05-06InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2014-06-05UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2014-05-06, 2014-06-05

Source documents