808bits

Juniper Networks MX240, MX480, MX960 3D Universal Edge Routers and EX9204, EX9208, EX9214 Ethernet Switches with RE-S-X6-64G/RE-S-X6-128G/EX9200-RE2 Routing Engine and MPC7E-10G/EX9200-40XS MACsec Card

FIPS 140-2 certificate #3938 · Juniper Networks, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode, installed, initialized and configured as specified in Sections 1.2 and 6 of the Security Policy

Certificate

Certificate number3938
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc. · website
Hardware versionsMX240, MX480, MX960, EX9204, EX9208, EX9214 with components identified in Security Policy Table 1
Firmware versionsJunos OS 19.1R2

Module description

Juniper Networks MX and EX9200 Series is a robust portfolio of SDN enabled routing and switching platforms that provide industry leading system capacity,density,security and performance. MPC7E-10G/EX9200-40XS supports 40 ports of 10gbps with GCM-AES-256 MACSEC encryption.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESC1786, C1789, 3969
CVLC1786
DRBGC1784, C1786, C1787
ECDSAC1786
HMACC1784, C1785, C1786, C1787
KAS-SSCvendor affirmed
KBKDFC1789
KTS
KTS
KTS
RSAC1786
SHSC1784, C1785, C1786, C1787
Triple-DESC1786

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2021-05-27InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-05-27

Source documents