Certificate 1581 - Check Point IP Appliance
intCertNum 1581
strVendorName Check Point Software Technologies Ltd.
strURL http://www.checkpoint.com
strAddress1
strAddress2 9900 Belward Campus Drive
strAddress3 Suite 250
strCity Rockville
strStateProv MD
strPostalCode 20850
strCountry 20850
strContact David Ambrose
strEmail Check_Point_Federal@us.checkpoint.com
strPhone 703-628-2935
strFax
strContact2 Malcolm Levy
strEmail2 product_certifications@checkpoint.com
strFax2
strPhone2 +972-37534561
intCertNum 1581
strModuleName Check Point IP Appliance
strPartNumber Hardware Versions: IP290 (CPAP-IP295-D-GFIP [Nokia NBB0292000] and N431174001, CPAP-IP295-D-AC-DS [Nokia NBB0295000] and N431174001) and IP690 (CPAP-IP695-D-GFIP [Nokia NBB0692000], CPIP-A-4-1C and N431174001);
Firmware Version: IPSO v4.2 with Check Point VPN-1 NGX R65 with hot fix HFA-30
memModuleNotes When operated in FIPS mode and tamper evident seals installed as indicated in the Security Policy
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL
strModuleType Hardware
strValidationDate 10/11/2011
intOverallLevel 2
memIndividualLevelNotes -Design Assurance: Level 3
strFIPSAlgorithms AES (Certs. #497, #709, #769 and #342);
Triple-DES (Certs. #507, #637, #510, #638, #729, #669 and #406);
HMAC (Certs. #248, #384, #251, #385, #499, #421 and #146);
SHS (Certs. #564, #734, #567, #735, #883, #775 and #417);
DSA (Certs. #202 and #271);
RSA (Certs. #211, #332, #213 and #333);
RNG (Certs. #275, #417, #277 and #418)
strOtherAlgorithms CAST;
DES;
HMAC MD5;
MD5;
Arcfour;
Twofish;
Blowfish;
Diffie-Hellman (key agreement, key establishment methodology provides between 112 and 128 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
RSA (key wrapping;
key establishment methodology provides between 112 and 150 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
Triple-DES (K3 mode;
non-compliant)
strConfiguration Multi-chip standalone
memModuleDescription The Check Point IP Applicances are full-featured enterprise systems designed for small to medium enterprises, with Service Provider flexibility and rapid serviceability option in a single rack space. When combined with Check Point VPN-1 these platforms provide reliable, easy to manage distributed security and access.
intModuleCount 1
memAdditionalNotes
strFirstValidtionDate 10/11/11 00:00:00
strLabName CEAL
strValidationYear 2011