Network Security Platform Sensor NS7150, NS7250 and NS7350
Network Security Platform Sensor NS7150, NS7250 and NS7350, from McAfee LLC, holds FIPS 140-2 certificate #3166 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated with the tamper evident seals installed as indicated in the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Certificate
| Certificate number | 3166 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | McAfee LLC · website |
| Hardware versions | P/Ns IPS-NS7150 Version 0.60, IPS-NS7250 Version 0.60 and IPS-NS7350 Version 0.60; FIPS Kit P/N IAC-FIPS-KT2 |
| Firmware versions | 9.1.17.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
Network Security Platform products (formerly known as IntruShield) are Intrusion Prevention Systems (IPS) that protect network infrastructures and endpoints from intrusions such as zero-day, DoS, spyware, VoIP, botnet, malware, phishing, and encrypted attacks with highly accurate, enterprise-class risk-aware intrusion prevention. The Network Security Management system manages the sensor deployments and permits the customer to receive real-time network status updates and alerts, implement customized security policies and incident response plans, and perform forensic analysis of attacks.
Security level exceptions
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (8)
| Algorithm | CAVP certificates |
|---|---|
| AES | 4801 |
| CKG | vendor affirmed |
| CVL | 1435, 1436 |
| DRBG | 1670 |
| HMAC | 3208 |
| KTS | |
| RSA | 2628, 2629 |
| SHS | 3945, 3946 |
Allowed algorithms
Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2018-04-05 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2018-04-05