808bits

Forcepoint NGFW Cryptographic Kernel Module

FIPS 140-2 certificate #2276 · Forcepoint · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number2276
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorForcepoint · website
Software versions2.0[1] and 2.0.1[2]

Module description

The Forcepoint NGFW Cryptographic Kernel Module is a software module that provides cryptographic services required by the Forcepoint NGFW product.

Security level exceptions

  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES2914, 2915, 2916, 2917, 2918, 2919, 2920, 2921, 4587, 4589, 4650, 4717
HMAC1843, 1844, 1845, 1846, 1847, 1848, 3036, 3037, 3078
SHS2452, 2453, 2454, 2455, 2456, 2457, 3762, 3763, 3809
Triple-DES1729, 1730, 1731, 1732, 1733, 1734, 2440, 2441, 2473

Tested configurations

  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 1035 with AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 1065 with AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 1402 with AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3202 with AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3202 without AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3206 with AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3206 without AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 5206 with AES-NI[1]
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint MIL-320[1]
  • Debian GNU/Linux 9.0-based distribution running on Forcepoint 2105 With AES-NI[2]
  • Debian GNU/Linux 9.0-based distribution running on Forcepoint 325-C2 with AES-NI[2]
  • Debian GNU/Linux 9.0-based distribution running on Forcepoint 3305 with AES-NI[2]
  • Debian GNU/Linux 9.0-based distribution running on Forcepoint 3305 without AES-NI[2]
  • Debian GNU/Linux 9.0-based distribution running on Forcepoint 6205 with AES-NI[2] (single-user mode)

Validation history

DateTypeLab
2014-11-07Initialatsec information security corporation
2017-10-18Updateatsec information security corporation
2017-10-26Updateatsec information security corporation
2017-11-06Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2014-11-07, 2017-10-18, 2017-10-26, 2017-11-06

Source documents