808bits

Adaptive Security Appliance Virtual Cryptographic Module

FIPS 140-3 certificate #4712 · Cisco Systems, Inc. · data as of 2026-10-21

Adaptive Security Appliance Virtual Cryptographic Module, from Cisco Systems, Inc., holds FIPS 140-3 certificate #4712 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5262. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When installed, initialized and configured as specified in section "Secure Operation" of the Security Policy and operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)

Certificate

Certificate number4712
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCisco Systems, Inc. · website
Software versions9.16.4

Module description

Quoted from the NIST CMVP entry for this certificate.

Virtual Adaptive Security Appliances offers the combination of the industry's most deployed stateful firewall with a comprehensive range of next-generation network security services, intrusion prevention system (IPS), content security and secure unified communications. Delivering robust user and application policy enforcement, multi-vector attack protection, and secure connectivity services in cost-effective, easy-to-deploy solutions.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (24)

AlgorithmCAVP certificates
AES-CBCA2952, A3376
AES-GCMA2952, A3376
Counter DRBGA2952, A3376
ECDSA KeyGen (FIPS186-4)A2952, A3376
ECDSA KeyVer (FIPS186-4)A2952, A3376
ECDSA SigGen (FIPS186-4)A2952, A3376
ECDSA SigVer (FIPS186-4)A2952, A3376
HMAC-SHA-1A2952, A3376
HMAC-SHA2-256A2952, A3376
HMAC-SHA2-384A2952, A3376
HMAC-SHA2-512A2952, A3376
KAS-ECC-SSC Sp800-56Ar3A2952, A3376
KAS-FFC-SSC Sp800-56Ar3A2952, A3376
KDF IKEv2A2952, A3376
KDF SSHA2952, A3376
RSA KeyGen (FIPS186-4)A2952, A3376
RSA SigGen (FIPS186-4)A2952, A3376
RSA SigVer (FIPS186-4)A2952, A3376
Safe Primes Key GenerationA2952, A3376
SHA-1A2952, A3376
SHA2-256A2952, A3376
SHA2-384A2952, A3376
SHA2-512A2952, A3376
TLS v1.2 KDF RFC7627A2952, A3376

Tested configurations

  • Linux 4 (FX-OS) on NFVIS 4.4 running on ENCS 5412 Server with Intel Xeon Processor D-1557 (Broadwell) With PAA
  • Linux 4 (FX-OS) on NFVIS 4.4 running on ENCS 5412 Server with Intel Xeon Processor D-1557 (Broadwell) without PAA
  • Linux 4 (FX-OS) on VMware ESXi 6.7 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) with PAA
  • Linux 4 (FX-OS) on VMware ESXi 6.7 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) without PAA
  • Linux 4 (FX-OS) on VMware ESXi 7.0 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) with PAA
  • Linux 4 (FX-OS) on VMware ESXi 7.0 running on UCS C220 M5 SFF Server with Intel Xeon Gold 6128 (Skylake) without PAA

Validation history

DateTypeLab
2024-06-28InitialGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-06-28

Source documents