FireEye NX Series: NX1500, NX2500, NX2550, NX3500, NX4500, NX5500, NX6500
Certificate
| Certificate number | 4060 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | FireEye, Inc. · website |
| Hardware versions | NX1500, NX2500, NX2550, NX3500, NX4500, NX5500, NX6500 |
| Firmware versions | 9.0.3 |
Module description
The FireEye Network Threat Prevention Platform identifies and blocks zero-day Web exploits, droppers (binaries), and multi-protocol callbacks to help organizations scale their advanced threat defenses across a range of deployments, from the multi-gigabit headquarters down to remote, branch, and mobile offices. FireEye Network with Intrusion Prevention System (IPS) technology further optimizes spend, substantially reduces false positives, and enables compliance while driving security across known and unknown threats.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | C1720 |
| CKG | vendor affirmed |
| CVL | C1720 |
| DRBG | C1720, C1934 |
| DSA | C1720 |
| ECDSA | C1720 |
| HMAC | C1720, C1934 |
| KAS-SSC | vendor affirmed |
| KTS | |
| KTS | |
| RSA | C1720 |
| SHS | C1720, C1934 |
| Triple-DES | C1720 |
Allowed algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-10-28 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2021-10-28