FortiOS 6.4/7.0
Caveat: When operated in FIPS mode. Authentication at level 3 is only applicable when identity-based authentication is enforced for the User role.
Certificate
| Certificate number | 4443 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Fortinet, Inc. · website |
| Firmware versions | FortiOS 6.4 (FIPS-CC-64-5) and FortiOS 7.0 (FIPS-CC-70-6) |
Module description
The FortiOS 6.4/7.0 is a firmware based operating system that runs exclusively on Fortinet's FortiGate/FortiWiFi product family. The FortiOS provides integrated firewall, VPN, antivirus, antispam, intrusion prevention, content filtering and traffic shaping and HA capabilities.
Security level exceptions
- Roles, Services, and Authentication: Level 3
- Design Assurance: Level 2
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A2225, A2229, A2242, A2269, A2270 |
| CVL | A2269, A2270 |
| DRBG | A2225, A2229 |
| ECDSA | A2242, A2269, A2270 |
| ENT | |
| HMAC | A2225, A2229, A2242, A2269, A2270 |
| KAS | |
| KAS-SSC | A2269, A2270 |
| KTS | |
| KTS | |
| RSA | A2242, A2269, A2270 |
| SHS | A2225, A2229, A2242, A2269, A2270 |
Tested configurations
- FortiGate-61F with SoC4 (ARMv8) Processor
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-02-23 | Initial | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2023-02-23