808bits

Forcepoint NGFW Cryptographic Library

FIPS 140-2 certificate #2319 · Forcepoint · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number2319
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorForcepoint · website
Software versions2.0

Module description

The Forcepoint NGFW Cryptographic Library is a software module that provides cryptographic services required by the Forcepoint NGFW product.

Security level exceptions

  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES2948, 2949, 2950, 2951, 2952, 2953, 2954, 2955, 4591, 4592, 4593, 4716
CVL344, 345, 346, 347, 348, 349, 350, 351, 352, 353, 354, 355, 1260, 1261, 1262
DRBG549, 550, 551, 552, 553, 554, 555, 556, 1532, 1533, 1534, 1605
DSA878, 879, 880, 881, 882, 883, 1217, 1218, 1219
ECDSA537, 538, 539, 540, 541, 542, 1124, 1125, 1126
HMAC1869, 1870, 1871, 1872, 1873, 1874, 3039, 3040, 3041
RSA1549, 1550, 1551, 1552, 1553, 1554, 2502, 2503, 2504
SHS2482, 2483, 2484, 2485, 2486, 2487, 3765, 3766, 3767
Triple-DES1752, 1753, 1754, 1755, 1756, 1757, 2443, 2444, 2445

Other algorithms

Diffie-Hellman (CVL Certs. #344, #346, #348, #350, #352, #354, #1260, #1261 and #1262, key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #344, #345, #346, #347, #348, #349, #350, #351, #352, #353, #354, #355, #1260, #1261 and #1262, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 1035 with AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 1065 with AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 1402 with AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3202 with AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3202 without AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3206 with AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 3206 without AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint 5206 with AES-NI
  • Debian GNU/Linux 6.0-based distribution running on Forcepoint MIL-320
  • Debian GNU/Linux 9.0-based distribution running on Forcepoint 325-C2 with AES-NI
  • Debian GNU/Linux 9.0-based distribution running on Forecepoint 2105 with AES-NI
  • Debian GNU/Linux 9.0-based distribution running on Forecepoint 3305 with AES-NI
  • Debian GNU/Linux 9.0-based distribution running on Forecepoint 3305 without AES-NI
  • Debian GNU/Linux 9.0-based distribution running on Forecepoint 6205 with AES-NI (single-user mode)

Validation history

DateTypeLab
2015-01-28Initialatsec information security corporation
2017-10-17Updateatsec information security corporation
2017-10-26Updateatsec information security corporation
2017-11-06Updateatsec information security corporation
2018-03-14Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2015-01-28, 2017-10-17, 2017-10-26, 2017-11-06, 2018-03-14

Source documents