Certificate 2144 - FortiGate-3950B/3951B
intCertNum 2144
strVendorName Fortinet, Inc.
strURL http://www.fortinet.com
strAddress1 326 Moodie Drive
strAddress2
strAddress3
strCity Ottawa
strStateProv Ontario
strPostalCode K2H 8G3
strCountry K2H 8G3
strContact Alan Kaye
strEmail
strPhone 613-225-9381 x7416
strFax 613-225-2951
strContact2
strEmail2
strFax2
strPhone2
intCertNum 2144
strModuleName FortiGate-3950B/3951B
strPartNumber Hardware Versions: FortiGate-3950B and FortiGate-3951B with SKU-FIPS-SEAL-RED;
Firmware Versions: FortiOS v4.0, build3830, 131223
memModuleNotes When operated in FIPS mode with the tamper evident seals installed as indicated in the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL http://www.fortinet.com/products
strModuleType Hardware
strValidationDate 05/06/2014;07/24/2014
intOverallLevel 2
memIndividualLevelNotes -Cryptographic Module Ports and Interfaces: Level 3;-Roles, Services, and Authentication: Level 3;-Design Assurance: Level 3
strFIPSAlgorithms AES (Certs. #2278, #2607 and #2608);
Triple-DES (Certs. #1425, #1572 and #1573);
HMAC (Certs. #1396, #1615 and #1616);
SHS (Certs. #1959, #2191 and #2192);
RSA (Cert. #1169 and #1334);
RNG (Cert. #1234)
strOtherAlgorithms DES;
MD5;
HMAC-MD5;
Diffie-Hellman (key agreement: key establishment methodology provides between 112 and 201 bits of encryption strength;
non-compliant less than 112-bits of encryption strength);
RSA (key wrapping;
key establishment methodology provides 112 bits of encryption strength;
non-compliant less than 112-bits of encryption strength)
strConfiguration Multi-chip standalone
memModuleDescription FortiGate Multi-Threat Security Solutions are dedicated, hardware-based devices that deliver complete content protection against blended threats at the network perimeter or within the internal network.
intModuleCount 1
memAdditionalNotes 07/24/14: Updated FW to build 3830, 131223 and updated the security policy.
strFirstValidtionDate 05/06/14 00:00:00
strLabName EWA
strValidationYear 2014