FortiGate-5050 and FortiGate-5140
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 961 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-chip standalone |
| Vendor | Fortinet, Inc. · website |
| Hardware versions | FortiGate-5050 (build C4QP38); FortiGate-5140 (build C4GL51); FortiGate-5001SX (build P4CF76); FortiGate-5001FA2 (build C5FA26) |
| Firmware versions | FortiOS 3.00, build 8317, 061121 |
Module description
FortiGate Multi-Threat Security Solutions are dedicated, hardware-based devices that deliver complete content protection against blended threats at the network perimeter or within the internal network.
Security level exceptions
- Cryptographic Module Ports and Interfaces: Level 3
- Roles, Services, and Authentication: Level 3
- Cryptographic Key Management: Level 3
- Design Assurance: Level 3
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 471, 472, 476 |
| HMAC | 228, 229, 233 |
| RNG | 251 |
| RSA | 193 |
| SHS | 539, 540, 544 |
| Triple-DES | 486, 487, 490 |
Other algorithms
DES; Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 201 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA (key wrapping; key establishment methodology provides 110 bits of encryption strength; non-compliant); MD5; HMAC-MD5
Validation history
| Date | Type | Lab |
|---|---|---|
| 2008-06-05 | Initial | DOMUS |
| 2008-06-13 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2008-06-05, 2008-06-13