Certificate 1657 - Cisco Catalyst 3560-X and 3750-X Switches
intCertNum 1657
strVendorName Cisco Systems, Inc.
strURL http://www.cisco.com
strAddress1 170 West Tasman Drive
strAddress2
strAddress3
strCity San Jose
strStateProv CA
strPostalCode 95134
strCountry 95134
strContact Global Certification Team
strEmail certteam@cisco.com
strPhone
strFax
strContact2
strEmail2
strFax2
strPhone2
intCertNum 1657
strModuleName Cisco Catalyst 3560-X and 3750-X Switches
strPartNumber Hardware Versions: (WS-C3560X-24P, WS-C3560X-24T, WS-C3560X-48P, WS-C3560X-48PF, WS-C3560X-48T, WS-C3750X-12S, WS-C3750X-24P, WS-C3750X-24S, WS-C3750X-24T, WS-C3750X-48P, WS-C3750X-48PF, WS-C3750X-48T, C3KX-NM-1G, C3KX-NM-10G, C3KX-NM-BLANK, C3KX-NM-10GT) with FIPS Kit (C3KX-FIPS-KIT);
Firmware Version: 15.0(1)SE2
memModuleNotes When operated in FIPS mode with tamper evident labels and security devices installed as indicated in the Security Policy
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL
strModuleType Hardware
strValidationDate 12/22/2011;02/23/2012;05/29/2012
intOverallLevel 2
memIndividualLevelNotes
strFIPSAlgorithms AES (Certs. #1024, #1275 and #1749);
HMAC (Cert. #1026);
RNG (Cert. #932);
RSA (Cert. #869);
SHS (Cert. #1536);
Triple-DES (Cert. #1133)
strOtherAlgorithms DES;
HMAC-MD5;
MD5;
RC4;
Diffie-Hellman (key agreement: key establishment methodology provides between 112 and 156 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
RSA (key wrapping;
key establishment methodology provides 112 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
AES (Cert. #1749, key wrapping;
key establishment methodology provides 128 bits or 256 bits of encryption strength)
strConfiguration Multi-chip standalone
memModuleDescription Cisco Catalyst 3750-X and 3650-X Series Switches are enterprise-class stackable switches that provide high availability, scalability, security, energy efficiency, and ease of operation with innovative features such as Cisco StackPower, Power over Ethernet Plus (PoE+), optional network modules, redundant power supplies, and MAC security. The Catalyst 3750-X and 3650-X Series Switches meet FIPS 140-2 overall Level 2 requirements as multi-chip standalone modules.

The switches include cryptographic algorithms implemented in IOS software as well as hardware ASICs. The module provides 802.1X-rev
intModuleCount 1
memAdditionalNotes 02/23/12: Updated security policy.
05/29/12: Replaced FW 15.0(1)SE with 15.0(1)SE2. Updated security policy.
strFirstValidtionDate 12/22/11 00:00:00
strLabName Leidos
strValidationYear 2011