FIPS 140-2 certificate 3695: Cisco Firepower Threat Defense Cryptographic Module

Certificate

Certificate number	3695
Standard	FIPS 140-2
Status	historical
Overall level	2
Module type	Hardware
Embodiment	Multi-Chip Stand Alone
Vendor	Cisco Systems, Inc. · website
Hardware versions	FPR1010[1], FPR1120[2], FPR1140[2], FPR2110[3], FPR2120[3], FPR2130[3] and FPR2140[3] with FIPS Kit (AIR-AP-FIPSKIT=) and Opacity Shield 800-44098-01[1], 800-45098-01[2] and 69-100250-01[3]
Firmware versions	6.4

Module description

The 1K is a family of three platforms, 1010 for desktop and 1120 and 1140 for rack mount. While the 2K is a family of four threat-focused NGFW security rack mount platforms. These are all next generation security services platforms capable of running multiple (firewall (NGFW), traffic management) security services simultaneously.

Security level exceptions

Roles, Services, and Authentication: Level 3
Mitigation of Other Attacks: N/A

Approved algorithms

Algorithm	CAVP certificate
AES	3301, 4905, C784
CVL	1521, C784
DRBG	819, 1735, C784
ECDSA	1254, C784
HMAC	2095, 3272, C784
RSA	2678, C784
SHS	2737, 4012, C784
Triple-DES	1881, 2559, C784

Allowed algorithms

Diffie-Hellman (CVL Certs. #C784 and #1521, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C784 and #1521, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

Validation history

Date	Type	Lab
2020-08-06	Initial	Gossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2020-08-06

Cisco Firepower Threat Defense Cryptographic Module