SonicWALL TZ 300/TZ 300W, TZ 400/TZ 400W, TZ 500/TZ 500W, TZ 600, SOHOW, SM 9200, SM 9400, SM 9600 and NSâ‚ 2650, NSâ‚ 3600, NSâ‚ 3650, NSâ‚ 4600, NSâ‚ 4650, NSâ‚ 5600, NSâ‚ 5650, NSâ‚ 6600, NSâ‚ 6650, NSâ‚ 9250, NSâ‚ 9450, NSâ‚ 9650
Certificate
| Certificate number | 3327 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | SonicWall, Inc. · website |
| Hardware versions | 101-500403-55 Rev. F (TZ 300), 101-500404-54 Rev. E (TZ 300W), 101-500405-55 Rev. F (TZ 400), 101-500406-54 Rev. E (TZ 400W), 101-500411-56 Rev. G (TZ 500), 101-500412-55 Rev. F (TZ 500W), 101-500413-56 Rev. G (TZ 600), 101-500410-54 Rev. E (SOHOW), 101-500455-54 Rev. E (SM 9200), 101-500454-54 Rev. E (SM 9400), 101-500453-54 Rev. E (SM 9600), 101-500452-50 Rev. A (NSâ‚ 2650), 101-500459-54 Rev. E (NSâ‚ 3600), 101-500514-50 (NSâ‚ 3650), 101-500458-54 Rev. E (NSâ‚ 4600), 101-500451-50 (NSâ‚ 4650), 101-500457-54 Rev. E (NSâ‚ 5600), 101-500517-50 (NSâ‚ 5650), 101-500456-54 Rev. E (NSâ‚ 6600), 101-5005518-50 Rev A (NSâ‚ 6650), 101-500520-50 Rev A (NSâ‚ 9250), 101-500519-50 Rev A (NSâ‚ 9450), 101-500449-50 Rev A (NSâ‚ 9650) |
| Firmware versions | SonicOS v6.5.2 |
Module description
The SonicWall family of firewalls tightly integrates intrusion prevention, malware protection, Application Intelligence and Control with real-time Visualization. Dell SonicWALL Reassembly-Free Deep Packet Inspection engine scans 100% of traffic and massively scales to meet needs of the most high-performance networks.
Security level exceptions
- Cryptographic Module Specification: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 5462 |
| CKG | vendor affirmed |
| CVL | 1913, 1914, 1915 |
| DRBG | 2144 |
| DSA | 1405 |
| ECDSA | 1460 |
| HMAC | 3620 |
| KTS | |
| RSA | 2934 |
| SHS | 4383 |
| Triple-DES | 2748 |
Allowed algorithms
Diffie-Hellman (CVL Certs. #1913 and #1915, key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1913, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2018-11-14 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2018-11-14