808bits

Juniper Networks EX4650, QFX5120 and QFX5210 Ethernet Switches

FIPS 140-2 certificate #4662 · Juniper Networks, Inc · data as of 2026-10-09

Juniper Networks EX4650, QFX5120 and QFX5210 Ethernet Switches, from Juniper Networks, Inc, holds FIPS 140-2 certificate #4662 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode, installed, initialized and configured as specified in Sections 1.2 and 5 of the Security Policy

Certificate

Certificate number4662
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorJuniper Networks, Inc · website
Hardware versionsEX4650-48Y-AFI, EX4650-48Y-AFO, EX4650-48Y-DC-AFI, EX4650-48Y-DC-AFO, QFX5120-32C-AFI, QFX5120-32C-AFO, QFX5120-32C-DC-AFI, QFX5120-32C-DC-AFO, QFX5120-48Y-AFI2, QFX5120-48Y-AFO2, QFX5120-48Y-DC-AFI2, QFX5120-48Y-DC-AFO2, QFX5210-64C-AFI, QFX5210-64C-AFO, QFX5210-64C-DC-AFI and QFX5210-64C-DC-AFO
Firmware versionsJunos OS 19.3R1

Module description

Quoted from the NIST CMVP entry for this certificate.

The Juniper Networks QFX series switches are high performance, high density data center switches. The QFX switches provide high performance, wire speed switching with low latency and jitter. The QFX series switches provide the universal building blocks for multiple data center fabric architectures.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AESC1543
CVLC1543
DRBGC1541, C1543
ECDSAC1543
HMACC1541, C1542, C1543
KAS-SSCvendor affirmed
RSAC1543
SHSC1541, C1542, C1543
Triple-DESC1543

Allowed algorithms

NDRNG

Tested configurations

  • N/A

Validation history

DateTypeLab
2023-11-28InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2023-11-28

Source documents