FIPS 140-2 certificate 426: 1721 and 1760 Modular Access Routers with MOD1700-VPN

1721 and 1760 Modular Access Routers with MOD1700-VPN, from Cisco Systems, Inc., holds FIPS 140-2 certificate #426 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	426
Standard	FIPS 140-2
Status	historical
Overall level	2
Module type	Hardware
Embodiment	Multi-chip standalone
Vendor	Cisco Systems, Inc. · website
Hardware versions	1721 and 1760 with MOD1700-VPN Version 2.1, Board Version A0 and
Firmware versions	IOS 12.3(3d)

Module description

Quoted from the NIST CMVP entry for this certificate.

The Cisco Modular Access Routers are routers that provides data protection on a network providing packet encryption. The modules perform all of the functions typical of a router. In addition to the normal routing functions, the modules also provide packet encryption. The modules are capable of encrypting traffic between one or more modules: providing a secure connection at the packet level.

Approved algorithms (6)

Algorithm	CAVP certificates
AES	46
DSA/SHA-1
HMAC-SHA-1	vendor affirmed
RSA	vendor affirmed
Triple-DES	32, 156
Triple-DES MAC	vendor affirmed

Other algorithms

DES (Certs. #100 and #202); DES MAC (Cert. #202, vendor affirmed); MD4; MD5; HMAC-MD5; Diffie-Hellman (key agreement)

Validation history

Date	Type	Lab
2004-05-06	Initial	SAIC-VA
2004-05-25	Update
2005-05-24	Update
2010-05-28	Update
2012-02-23	Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2004-05-06, 2004-05-25, 2005-05-24, 2010-05-28, 2012-02-23

1721 and 1760 Modular Access Routers with MOD1700-VPN