808bits

Blue Coat Secure Web Gateway Virtual Appliance

FIPS 140-2 certificate #3077 · Symantec, A Division of Broadcom · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number3077
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorSymantec, A Division of Broadcom · website
Software versions6.7.2, 6.7.4, 6.7.4.601, 6.7.5

Module description

The Blue Coat ProxySG physical and virtual appliances are the core of Symantec’s Unified Security and Optimization solutions for business assurance. The appliances offer complete security and control of web traffic, providing rich policy constructs for threat protection, SSL traffic, authentication, filtering, data loss prevention and logging. SWG VA identifies malicious payloads and then filters, strips, blocks or replaces web content to mitigate risks and prevent data loss. The appliances also optimize web and internal application traffic for data, video, cloud and web applications.

Security level exceptions

  • Roles, Services, and Authentication: Level 2
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES4596
CKGvendor affirmed
CVL1265, 1267
DRBG1541
HMAC3046, 3047
KAS-SSCvendor affirmed
KTS
KTS
RSA2506, 2507
SHS3772, 3773
Triple-DES2446

Allowed algorithms

MD5; NDRNG; RSA (key wrapping, key establishment methodology provides between 112 and 150 bits of encryption strength)

Tested configurations

  • SGOS v6.7.2, SGOS v6.7.4, SGOS v6.7.4.601 and SGOS v6.7.5 on Vmware ESXi 6.0 running on a Dell PowerEdge R830 Server

Validation history

DateTypeLab
2017-12-11InitialAcumen Security
2017-12-20UpdateAcumen Security
2019-11-13UpdateAcumen Security
2021-02-16UpdateAcumen Security
2022-05-27UpdateAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2017-12-11, 2017-12-20, 2019-11-13, 2021-02-16, 2022-05-27

Source documents