Certificate 1219 - VPN-1 [1] and Security Gateway with firewall and vpn Software Blades [2]
intCertNum 1219
strVendorName Check Point Software Technologies Ltd.
strURL http://www.checkpoint.com
strAddress1 12007 Sunrise Valley Dr.
strAddress2 Suite 130
strAddress3
strCity Reston
strStateProv VA
strPostalCode 20191
strCountry 20191
strContact David Ambrose
strEmail Check_Point_Federal@us.checkpoint.com
strPhone 703-628-2935
strFax
strContact2 Malcolm Levy
strEmail2 product_certifications@checkpoint.com
strFax2
strPhone2 +972 3-7534561
intCertNum 1219
strModuleName VPN-1 [1] and Security Gateway with firewall and vpn Software Blades [2]
strPartNumber Firmware Versions: NGX R65 with hot fix HFA 30 [1] and R70.1 [2]
memModuleNotes When operated in FIPS mode
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf][txt]
strPURL
strModuleType Firmware
strValidationDate 10/27/2009;11/20/2009;07/27/2011
intOverallLevel 1
memIndividualLevelNotes -Roles, Services, and Authentication: Level 2;-Design Assurance: Level 2;-Tested: Dell PowerEdge 1750 and Power-1 5070 with Check Point SecurePlatform Operating System, version NGX R65 HFA 30
strFIPSAlgorithms Triple-DES (Certs. #338, #733, #824, #825, #1114 and #1115);
AES (Certs. #257, #1130 and #1728);
SHS (Certs. #332, #890, #1053, #1054, #1511 and #1512);
HMAC (Certs. #67, #502, #642, #643, #1003 and #1004);
RSA (Certs. #66, #132, #537 and #853);
RNG (Certs. #90, #628 and #917)
strOtherAlgorithms CAST 40 bit;
CAST 128 bit;
DES (Cert. #314);
MD5;
HMAC-MD5;
Diffie-Hellman (key agreement, key establishment methodology provides between 112 and 128 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
RSA (key wrapping, key establishment methodology provides between 112 and 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength)
strConfiguration Multi-chip standalone
memModuleDescription Check Point's Security Gateway Software Blades R70.1 and VPN-1 R65 with hot fix HFA 30 provide an integrated software solution combining a firewall, vpn, and the hardened SecurePlatform operating system. Designed to meet the requirements of Internet, intranet, and extranet vpns it provides secure connectivity to corporate networks with remote and mobile users, branch offices, and business partners.
intModuleCount 1
memAdditionalNotes 11/20/09: Added tested OS, updated POCs 1 and 2 and Security Policy.
07/27/11: Added module name, FW R70.1, tested platform, algorithm certificates and product description; updated security policy.
strFirstValidtionDate 10/27/09 00:00:00
strLabName CEAL
strValidationYear 2009