Certificate 1552 - Check Point IP Appliance
intCertNum 1552
strVendorName Check Point Software Technologies Ltd.
strURL http://www.checkpoint.com
strAddress1 Check Point Software Technologies Ltd.
strAddress2 9900 Belward Campus Drive
strAddress3 Suite 250
strCity Rockville
strStateProv MD
strPostalCode 20850
strCountry 20850
strContact David Ambrose
strEmail product_certifications@checkpoint.com
strPhone 703-628-2935
strFax
strContact2 Malcolm Levy
strEmail2 product_certifications@checkpoint.com
strFax2
strPhone2 +972-37534561
intCertNum 1552
strModuleName Check Point IP Appliance
strPartNumber Hardware Versions: IP1280 (CPAP-IP1285-D-GFIP [Nokia NBB1270000], CPIP-A-4-1C, CPIP-A-D80G-CA, CPIP-A-CA-12-24 and N431174001), IP2450 (CPAP-IP2455-D-GFIP [Nokia NBB3450000], CPIP-A-4-1C, CPIP-A-D80G-CA, CPIP-A-CA-12-24 and N431174001) and IP2455 (CPAP-IP2455-D-
GFIP, CPIP-A-4-1C, CPIP-A-D80G-CA, CPIP-A-CA-12-24 and N431174001)
;
Firmware Version: IPSO v4.2 with Check Point VPN-1 NGX R65 with hot fix HFA 30
memModuleNotes When operated in FIPS mode and tamper evident seals installed as indicated in the Security Policy
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL
strModuleType Hardware
strValidationDate 06/07/2011;10/04/2011
intOverallLevel 2
memIndividualLevelNotes -Design Assurance: Level 3
strFIPSAlgorithms AES (Certs. #709 and #91);
Triple-DES (Certs. #637, #638, #729 and #204);
HMAC (Certs. #384, #385, #499 and #203);
SHS (Certs. #734, #735, #883 and #500);
DSA (Cert. #271);
RSA (Certs. #332 and #333);
RNG (Certs. #417 and #418)
strOtherAlgorithms CAST;
DES;
HMAC MD5;
MD5;
Arcfour;
Twofish;
Blowfish;
Diffie-Hellman (key agreement, key establishment methodology provides between 112 bits and 128 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
RSA (key wrapping;
key establishment methodology provides between 112 bits and 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
Triple-DES (K3 mode;
non-compliant)
strConfiguration Multi-chip standalone
memModuleDescription The Nokia VPN Applicances are full-featured enterprise systems designed for small to medium enterprises, with Service Provider flexibility and rapid serviceability option in a single rack space. When combined with Check Point VPN-1 these platforms provide reliable, easy to manage distributed security and access.
intModuleCount 1
memAdditionalNotes 10/04/11: Added HW IP2455 (CPAP-IP2455-D-GFIP, CPIP-A-4-1C, CPIP-A-D80G-CA, CPIP-A-CA-12-24 and N431174001) and updated Security Policy.
strFirstValidtionDate 06/07/11 00:00:00
strLabName CEAL
strValidationYear 2011