NetScaler MPX
NetScaler MPX, from Cloud Software Group, holds FIPS 140-3 certificate #4830 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: Interim Validation. When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper-evident seals are installed/applied as indicated in the Security Policy.
Certificate
| Certificate number | 4830 |
|---|---|
| Standard | FIPS 140-3 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Cloud Software Group · website |
| Hardware versions | 8900 FIPS, 9100 FIPS, 15000-50G FIPS |
| Firmware versions | 13.1.FIPS |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Netscaler product line optimizes delivery of applications over the Internet and private networks. It is an Application Delivery Controller (ADC) that performs application-specific traffic analysis to intelligently distribute, optimize, and secure L4-L7 network traffic for web-applications. All these capabilities are combined into a single, integrated appliance for increased productivity, with lower overall total cost of ownership.
Security level exceptions
- Roles, services, and authentication: Level 3
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (39)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A3942, A3943, A3944 |
| AES-CFB128 | A3942 |
| AES-CTR | A3942 |
| AES-GCM | A3943, A3944 |
| Counter DRBG | A3942 |
| ECDSA KeyGen (FIPS186-4) | A3942 |
| ECDSA KeyVer (FIPS186-4) | A3942 |
| ECDSA SigGen (FIPS186-4) | A3942, A3943, A3944 |
| ECDSA SigVer (FIPS186-4) | A3942, A3943, A3944 |
| Hash DRBG | A3943 |
| HMAC-SHA-1 | A3942, A3943, A3944 |
| HMAC-SHA2-224 | A3943, A3944 |
| HMAC-SHA2-256 | A3942, A3944 |
| HMAC-SHA2-384 | A3942, A3943, A3944 |
| HMAC-SHA2-512 | A3942, A3943, A3944 |
| KAS-ECC-SSC Sp800-56Ar3 | A3942, A3943, A3944 |
| KAS-FFC-SSC Sp800-56Ar3 | A3942 |
| KDF IKEv1 | A3942 |
| KDF IKEv2 | A3942 |
| KDF SNMP | A3942 |
| KDF SP800-108 | A3943 |
| KDF SSH | A3942 |
| KDF TLS | A3942, A3943, A3944 |
| KTS-IFC | A3942, A3943 |
| PBKDF | A3942 |
| RSA KeyGen (FIPS186-4) | A3942 |
| RSA SigGen (FIPS186-4) | A3942, A3943, A3944 |
| RSA SigVer (FIPS186-2) | A3943 |
| RSA SigVer (FIPS186-4) | A3942, A3943, A3944 |
| Safe Primes Key Generation | A3942 |
| Safe Primes Key Verification | A3942 |
| SHA-1 | A3942, A3943, A3944 |
| SHA2-224 | A3943, A3944 |
| SHA2-256 | A3942, A3943, A3944 |
| SHA2-384 | A3942, A3943, A3944 |
| SHA2-512 | A3942, A3943, A3944 |
| SHA3-256 | A3513 |
| TLS v1.2 KDF RFC7627 | A3942, A3943, A3944 |
| TLS v1.3 KDF | A3943 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-10-11 | Initial | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2024-10-11