Citrix ADC MPX
Citrix ADC MPX, from Citrix Systems, Inc., holds FIPS 140-2 certificate #4043 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.
Caveat: When installed, initialized and configured as specified in Section [3.1.4] of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Certificate
| Certificate number | 4043 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Citrix Systems, Inc. · website |
| Hardware versions | 8905 FIPS, 8910 FIPS, 8920 FIPS, 15020-50G FIPS, 15030-50G FIPS, 15040-50G FIPS, 15060-50G FIPS, 15080-50G FIPS, 15100-50G FIPS, 15120-50G FIPS |
| Firmware versions | 12.1.55.180 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The MPX product line optimizes delivery of applications over the Internet and private networks. MPX is an application delivery controller (ADC) that performs application-specific traffic analysis to intelligently distribute, optimize, and secure L4-L7 network traffic for web-applications. All these capabilities are combined into a single, integrated appliance for increased productivity, with lower overall total cost of ownership.
Security level exceptions
- Roles, Services, and Authentication: Level 3
Approved algorithms (11)
| Algorithm | CAVP certificates |
|---|---|
| AES | C1565, C1920, C1922 |
| CKG | vendor affirmed |
| CVL | C1561, C1562, C1563, C1565, C1920, C1921, C1922 |
| DRBG | C1920, C1922 |
| ECDSA | C1565, C1920, C1922 |
| HMAC | C1565, C1920, C1922 |
| KAS-SSC | vendor affirmed |
| PBKDF | vendor affirmed |
| RSA | A393, A607, C1565, C1920, C1922 |
| SHS | C1565, C1920, C1922 |
| Triple-DES | C1920 |
Allowed algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-10-16 | Initial | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
- 2026-09-22: observed moving from active to historical
- Validation dates on record: 2021-10-16