7206-VXR NPE-400 Router with VPN Acceleration Module (VAM): FIPS 140-2 cert #423

7206-VXR NPE-400 Router with VPN Acceleration Module (VAM), from Cisco Systems, Inc., holds FIPS 140-2 certificate #423 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	423
Standard	FIPS 140-2
Status	historical
Overall level	2
Module type	Hardware
Embodiment	Multi-chip standalone
Vendor	Cisco Systems, Inc. · website
Hardware versions	7206-VXR with VAM Version 1.0 and Board Version A0
Firmware versions	IOS 12.3(3d)

Module description

Quoted from the NIST CMVP entry for this certificate.

Cisco Modular Access Routers are routers that provide data protection on a network providing packet encryption. The module performs all of the functions typical of a router. In addition to the normal routing functions, the module also provides packet encryption. The module is capable of encrypting traffic between one or more modules: providing a secure connection at the packet level.

Approved algorithms (6)

Algorithm	CAVP certificates
AES	46
HMAC-SHA-1	vendor affirmed
RSA	vendor affirmed
SHA-1	26, 51
Triple-DES	29, 156
Triple-DES MAC	vendor affirmed

Other algorithms

DES (Certs. #101 and #202); DES MAC (Cert. #202, vendor affirmed); MD4; MD5; HMAC-MD5; Diffie-Hellman (key agreement)

Validation history

Date	Type	Lab
2004-05-06	Initial	SAIC-VA
2004-11-29	Update
2005-05-24	Update
2010-05-28	Update
2012-02-23	Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2004-05-06, 2004-11-29, 2005-05-24, 2010-05-28, 2012-02-23

7206-VXR NPE-400 Router with VPN Acceleration Module (VAM)