XTM 850 [1], XTM 860 [2], XTM 870 [3], XTM 870-F [4], XTM 1520 [5], XTM 1520-RP [6], XTM 1525 [7], XTM 1525-RP [8], XTM 2520 [9]
Certificate
| Certificate number | 2332 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | WatchGuard Technologies, Inc. · website |
| Hardware versions | SL8AE14 [1-5,7], SL15AE14 [6,8], SL25AE14F4 [9] with Tamper Evident Seal Kit: SKU WG8566 |
| Firmware versions | Fireware XTM OS v11.6.5 |
Module description
WatchGuard® XTM Extensible Threat Management appliances are built for enterprise-grade performance with blazing throughput and numerous connectivity options. Advanced networking features include clustering, high availability (active/active), VLAN support, multi-WAN load balancing and enhanced VoIP security, plus inbound and outbound HTTPS inspection, to give the strong security enterprises need.
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 2360, 2361 |
| CVL | 163 |
| DSA | 738 |
| ECDSA | 388 |
| HMAC | 1463, 1464 |
| RNG | 1175 |
| RSA | 1218 |
| SHS | 2032, 2033 |
| Triple-DES | 1476, 1477 |
Other algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength); DES; RC4; MD5; AES-CCM (non-compliant); PBKDF (non-compliant)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2015-03-03 | Initial | EWA - Canada |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2015-03-03