FIPS 140-2 certificate 3823: Cisco ASA and ISA Firepower Threat Defense Cryptographic Modules

Certificate

Certificate number	3823
Standard	FIPS 140-2
Status	historical
Overall level	2
Module type	Hardware
Embodiment	Multi-Chip Stand Alone
Vendor	Cisco Systems, Inc. · website
Hardware versions	ASA 5508-X[1][2], ASA 5516-X[1][3], ISA 3000-4C[1] and ISA 3000-2C2F[1] with [AIR-AP-FIPSKIT=][1], [ASA5508-FIPS-KIT=][2] and [ASA5516-FIPS-KIT=][3]
Firmware versions	6.4

Module description

Cisco Firepower Threat Defense (FTD) is a unified software image, which includes the Cisco ASA features and FirePOWER Services. This unified software is capable of offering the functions of ASA and FirePOWER deployed on Cisco Firepower 4100 Series and the Firepower 9300 appliances as well the FTD can be also be deployed on Cisco Firepower Threat Defense (FTD) ASA 5508-X, ASA 5516-X, ISA 3000-4C and ISA 3000-2C2F.

Security level exceptions

Roles, Services, and Authentication: Level 3
Mitigation of Other Attacks: N/A

Approved algorithms

Algorithm	CAVP certificate
AES	3301, 4905
CVL	1521
DRBG	819, 1735
ECDSA	1254
HMAC	2095, 3272
RSA	2678
SHS	2737, 4012
Triple-DES	1881, 2559

Allowed algorithms

Diffie-Hellman (CVL Cert. #1521, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1521, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)

Tested configurations

Validation history

Date	Type	Lab
2021-02-23	Initial	Gossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2021-02-23

Cisco ASA and ISA Firepower Threat Defense Cryptographic Modules