FortiGate-3950B/3951B
Caveat: When operated in FIPS mode with the tamper evident seals installed as indicated in the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Certificate
| Certificate number | 2144 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Fortinet, Inc. · website |
| Hardware versions | FortiGate-3950B and FortiGate-3951B with SKU-FIPS-SEAL-RED |
| Firmware versions | FortiOS v4.0, build3830, 131223 |
Module description
FortiGate Multi-Threat Security Solutions are dedicated, hardware-based devices that deliver complete content protection against blended threats at the network perimeter or within the internal network.
Security level exceptions
- Cryptographic Module Ports and Interfaces: Level 3
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 2278, 2607, 2608 |
| HMAC | 1396, 1615, 1616 |
| RNG | 1234 |
| RSA | 1169, 1334 |
| SHS | 1959, 2191, 2192 |
| Triple-DES | 1425, 1572, 1573 |
Other algorithms
DES; MD5; HMAC-MD5; Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 201 bits of encryption strength; non-compliant less than 112-bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112-bits of encryption strength)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2014-05-06 | Initial | EWA - Canada |
| 2014-07-24 | Update | EWA - Canada |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2014-05-06, 2014-07-24