808bits

Juniper Networks vSRX 3.0 Virtual Firewall

FIPS 140-2 certificate #3677 · Juniper Networks, Inc. · data as of 2026-10-21

Juniper Networks vSRX 3.0 Virtual Firewall, from Juniper Networks, Inc., holds FIPS 140-2 certificate #3677 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number3677
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Software versionsJunos OS 19.2R1

Module description

Quoted from the NIST CMVP entry for this certificate.

The vSRX Virtual Firewall delivers a complete virtual firewall solution, including advanced security, robust networking, and automated virtual machine life cycle management capabilities for service providers and enterprises. vSRX empowers security professionals to deploy and scale firewall protection in highly dynamic environments.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (10)

AlgorithmCAVP certificates
AESC936, C937, C939
CVLC935, C939
DRBGC932, C937, C939
ECDSAC937, C939
HMACC932, C934, C936, C937, C939
KAS-SSCvendor affirmed
KTS
RSAC937, C939
SHSC932, C934, C936, C937, C939
Triple-DESC936, C937, C939

Allowed algorithms

NDRNG

Tested configurations

  • and Junos OS 19.2R1 on VMware ESXi 6.5 running on a PacStar 451 Server with Intel Corei5
  • Junos OS 19.2R1 on VMware ESXi 6.5 running on a HP ProLiant DL380 Gen9 Server with Intel Xeon E5
  • Junos OS 19.2R1 on VMware ESXi 6.5 running on a PacStar 451 Server with Intel Xeon D

Validation history

DateTypeLab
2020-07-07InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2020-07-07

Source documents