NETSCOUT FIPS Object Module

Certificate

Module description

This cryptographic library provides FIPS Approved cryptographic services to the NETSCOUT family of products.

Security level exceptions

• Roles, Services, and Authentication: Level 2
• Physical Security: N/A
• Design Assurance: Level 3
• Mitigation of Other Attacks: N/A

Approved algorithms

Allowed algorithms

EC Diffie-Hellman (CVL Certs. #2056, #2124 and #C197, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 270 bits of encryption strength)

Tested configurations

• ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2600 (Intel Xeon E5) without PAA
• ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2600 (Intel Xeon E5) with PAA
• ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2800 (Intel Xeon E5) with PAA
• ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2800 (Intel Xeon E5) without PAA (single-user mode)
• Custom Linux 2.6.39.1 running on a NETSCOUT 6900C Series {69XXC} (Intel Xeon X 5620) with PAA
• Custom Linux 2.6.39.1 running on a NETSCOUT 6900C Series {69XXC} (Intel Xeon X 5620) without PAA
• Custom Linux 2.6.39.1 running on a NETSCOUT 7900C Series {79XXC} (Intel Xeon X 5620) with PAA
• Custom Linux 2.6.39.1 running on a NETSCOUT 7900C Series {79XXC} (Intel Xeon X 5620) without PAA
• Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410} (Intel Xeon Silver) with PAA
• Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410} (Intel Xeon Silver) without PAA
• Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795} (Intel Xeon Gold) with PAA
• Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795} (Intel Xeon Gold) without PAA
• Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895} (Intel Xeon Gold) with PAA
• Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895} (Intel Xeon Gold) without PAA
• Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795} (Intel Xeon Gold) with PAA
• Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795} (Intel Xeon Gold) without PAA
• Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802} (Intel Xeon Gold) with PAA
• Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802} (Intel Xeon Gold) without PAA
• Custom Linux 3.10 running on a NETSCOUT PowerEdge R730 {enhanced} (Intel Xeon E5-2697 v3) with PAA
• Custom Linux 3.10 running on a NETSCOUT PowerEdge R730 {enhanced} (Intel Xeon E5-2697 v3) without PAA
• Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} (Intel Xeon Gold) with PAA
• Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} (Intel Xeon Gold) without PAA
• Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} (Intel Xeon Silver) with PAA
• Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} (Intel Xeon Silver) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 1400 Series {1410} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 1400 Series {1410} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 1900 Series {1910D} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 1900 Series {1910D} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 2400 Series {2410} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 2400 Series {2410} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 2600 Series {2695} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 2600 Series {2695} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 2900 Series {2910D} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 2900 Series {2910D} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 4500 Series {4595D} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 4500 Series {4595D} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 4700 Series {4795} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 4700 Series {4795} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 4800 Series {4895} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 4800 Series {4895} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 6600 Series {6695} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 6600 Series {6695} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 9700 Series {9795} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 9700 Series {9795} (Intel Xeon E5) without PAA
• Custom Linux 3.7.5 running on a NETSCOUT 9800 Series {9802} (Intel Xeon E5) with PAA
• Custom Linux 3.7.5 running on a NETSCOUT 9800 Series {9802} (Intel Xeon E5) without PAA

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status historical
• Validation dates on record: 2019-05-09

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)