7206 VXR NPE-G1 Router with Single and Dual VPN Acceleration Module 2 (VAM2)
7206 VXR NPE-G1 Router with Single and Dual VPN Acceleration Module 2 (VAM2), from Cisco Systems, Inc., holds FIPS 140-2 certificate #428 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 428 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Cisco Systems, Inc. · website |
| Hardware versions | 7206 VXR NPE-G1 Version 1.1, Fab Version 05 and VAM2 Version 2.0, Board Version A0, and |
| Firmware versions | IOS 12.3(3d) |
Module description
Quoted from the NIST CMVP entry for this certificate.
Cisco Modular Access Routers are routers that provide data protection on a network providing packet encryption. The module performs all of the functions typical of a router. In addition to the normal routing functions, the module also provides packet encryption. The module is capable of encrypting traffic between one or more modules: providing a secure connection at the packet level.
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 46, 48 |
| HMAC-SHA-1 | vendor affirmed |
| RSA | vendor affirmed |
| SHA-1 | 26, 143 |
| Triple-DES | 156, 158 |
| Triple-DES MAC | vendor affirmed |
Other algorithms
DES (Certs. #202 and #204); DES MAC (Cert. #202, vendor affirmed); MD4; MD5; HMAC-MD5; Diffie-Hellman (key agreement)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-05-06 | Initial | SAIC-VA |
| 2004-11-29 | Update | |
| 2005-05-24 | Update | |
| 2010-05-28 | Update | |
| 2012-02-23 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-05-06, 2004-11-29, 2005-05-24, 2010-05-28, 2012-02-23