Cisco Firepower Next-Generation IPS Virtual (NGIPSv) Cryptographic Module

Certificate

Module description

The virtualized offering of the Cisco FirePOWER next-generation IPS (NGIPS) solution providing the Industry-leading threat protection. Real-time contextual awareness. Full-stack visibility. Intelligent security automation. This virtualized highly effective intrusion prevention system provides reliable performance and a low total cost of ownership. Threat protection can be expanded with optional subscription licenses to provide Advanced Malware Protection (AMP), application visibility and control, and URL filtering capabilities.

Security level exceptions

• Roles, Services, and Authentication: Level 3
• Physical Security: N/A
• Design Assurance: Level 2
• Mitigation of Other Attacks: N/A

Approved algorithms

Allowed algorithms

Diffie-Hellman (CVL Cert. #1561, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength; EC Diffie-Hellman (CVL Cert. #1561, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

• FXOS version 2 on VMware ESXi 6.0 running on Cisco UCS C220 M5 with Intel Xeon Silver 4110
• FXOS version 2 on VMware ESXi 6.5 running on Cisco UCS C220 M5 with Intel Xeon Silver 4110 (single-user mode)

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status historical
• Validation dates on record: 2021-02-03

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)