2691 and 3725 Modular Access Routers with AIM-VPN/EPII and 3745 Modular Access Router with AIM-VPN/HPII
2691 and 3725 Modular Access Routers with AIM-VPN/EPII and 3745 Modular Access Router with AIM-VPN/HPII, from Cisco Systems, Inc., holds FIPS 140-2 certificate #427 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 427 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Cisco Systems, Inc. · website |
| Hardware versions | 2691, 3725 and 3745 with AIM-VPN/EPII Version 1.0, Board Version A0 and AIM-VPN/HPII Version 1.0, Board Version A0, and |
| Firmware versions | IOS 12.3(3d) |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Cisco Modular Access Routers are routers that provides data protection on a network providing packet encryption. The modules perform all of the functions typical of a router. In addition to the normal routing functions, the modules also provide packet encryption. The modules are capable of encrypting traffic between one or more modules: providing a secure connection at the packet level.
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 46, 51 |
| HMAC-SHA-1 | vendor affirmed |
| RSA | vendor affirmed |
| SHA-1 | 26, 144 |
| Triple-DES | 156, 160 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
DES (Certs. #202 and #206); DES MAC (Cert. #202, vendor affirmed); MD4; MD5; HMAC-MD5; Diffie-Hellman (key agreement)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-05-06 | Initial | SAIC-VA |
| 2004-05-25 | Update | |
| 2005-05-24 | Update | |
| 2010-05-28 | Update | |
| 2012-02-23 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-05-06, 2004-05-25, 2005-05-24, 2010-05-28, 2012-02-23