Cisco FTD FX-OS on 4K/9K Cryptographic Module
Cisco FTD FX-OS on 4K/9K Cryptographic Module, from Cisco Systems, Inc., holds FIPS 140-3 certificate #5551 at overall level 2. The validation is active, with a sunset date of 2031-10-14. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in approved mode; The tamper evident seals and Physical Kit installed as indicated in the Security Policy; This module contains the embedded module [Cisco Firepower Threat Defense on 4K/9K Cryptographic Module] validated to FIPS 140-3 under Cert. #5456 operating in approved mode.
Certificate
| Certificate number | 5551 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2031-10-14 |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | MultiChipStand |
| Vendor | Cisco Systems, Inc. · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
Cisco FTD FX-OS on 4K/9K Cryptographic Module is an integrated network security system providing enterprise-class firewall with a comprehensive range of next-generation network security services, intrusion prevention system (IPS), content security and secure unified communications, HTTPS/TLSv1.2, SSHv2, IPsec/IKEv2, SNMPv3 and Cryptographic Cipher Suite B.
Security level exceptions
- Roles, services, and authentication: Level 3
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (26)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A4446, C1026 |
| AES-GCM | A4446, C1026 |
| Counter DRBG | A4446 |
| ECDSA KeyGen (FIPS186-4) | A4446 |
| ECDSA SigGen (FIPS186-4) | A4446 |
| ECDSA SigVer (FIPS186-4) | A4446 |
| HMAC-SHA-1 | A4446, C1026 |
| HMAC-SHA2-224 | A4446 |
| HMAC-SHA2-256 | A4446, C1026 |
| HMAC-SHA2-384 | A4446, C1026 |
| HMAC-SHA2-512 | A4446, C1026 |
| KAS-ECC-SSC Sp800-56Ar3 | A4446 |
| KAS-FFC-SSC Sp800-56Ar3 | A4446 |
| KDF IKEv2 | A4446 |
| KDF SNMP | A4446 |
| KDF SSH | A4446 |
| RSA KeyGen (FIPS186-4) | A4446 |
| RSA SigGen (FIPS186-4) | A4446 |
| RSA SigVer (FIPS186-4) | A4446 |
| Safe Primes Key Generation | A4446 |
| SHA-1 | A4446, C1026 |
| SHA2-224 | A4446 |
| SHA2-256 | A4446, C1026 |
| SHA2-384 | A4446, C1026 |
| SHA2-512 | A4446, C1026 |
| TLS v1.2 KDF RFC7627 | A4446 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-10-15 | Initial | Gossamer Security Solutions |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-10-21: first observed by this tracker, status active
- Validation dates on record: 2026-10-15