808bits

SonicWALL NSA Series SM 9600, SM 9400, SM 9200, NSA 6600

FIPS 140-2 certificate #2400 · SonicWall, Inc. · data as of 2026-10-21

SonicWALL NSA Series SM 9600, SM 9400, SM 9200, NSA 6600, from SonicWall, Inc., holds FIPS 140-2 certificate #2400 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number2400
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-chip standalone
VendorSonicWall, Inc. · website
Hardware versionsP/Ns 101-500380-71, Rev. A (SM 9600), 101-500361-70, Rev. A (SM 9400), 101-500363-70, Rev. A (SM 9200), 101-500364-66, Rev. A (NSA 6600)
Firmware versionsSonicOS v6.2.0.10-15n

Module description

Quoted from the NIST CMVP entry for this certificate.

The SonicWALL™ SuperMassive™ 9000 Series Next-Generation Firewall (NGFW) is designed to deliver deep security to your enterprise at multi-gigbit speeds. Offering the ultimate in security with enterprise class performance, the SuperMassive 9000 Series detects and blocks the most sophisticated threats before they can enter your network with minimal latency for every connection on the network. Its multicore design can gracefully handle traffic spikes without impacting network performance.

Security level exceptions

  • Cryptographic Module Specification: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (8)

AlgorithmCAVP certificates
AES2756
CVL226
DRBG466
DSA843
HMAC1727
RSA1444
SHS2322
Triple-DES1657

Other algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); NDRNG; MD5; RC4; RNG

Validation history

DateTypeLab
2015-06-29InitialUL Verification Services, Inc.
2016-03-22UpdateUL Verification Services, Inc.
2017-06-15UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2015-06-29, 2016-03-22, 2017-06-15

Source documents