Certificate 834 - Nokia VPN Appliance
intCertNum 834
strVendorName Check Point Software Technologies Ltd.
strURL http://www.checkpoint.com
strAddress1 9900 Belward Campus Drive
strAddress2 Suite 250
strAddress3
strCity Rockville
strStateProv MD
strPostalCode 20850
strCountry 20850
strContact David Ambrose
strEmail product_certifications@checkpoint.com
strPhone 703-628-2935
strFax
strContact2 Malcolm Levy
strEmail2 product_certifications@checkpoint.com
strFax2
strPhone2 +972-37534561
intCertNum 834
strModuleName Nokia VPN Appliance
strPartNumber Hardware Versions: IP260, IP265, IP1220, and IP1260;
Firmware Versions: IPSO v3.9 and Check Point VPN-1 NGX (R60) [HFA-03] and IPSO v4.1 and Check Point VPN-1 NGX (R60) [HFA-03]
memModuleNotes When operated in FIPS mode
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf][txt]
strPURL
strModuleType Hardware
strValidationDate 09/05/2007;09/26/2007;05/28/2009
intOverallLevel 2
memIndividualLevelNotes
strFIPSAlgorithms AES (Certs. #442, #226 and #91);
Triple-DES (Certs. #465, #466, #317 and #204);
HMAC (Certs. #207, #208, #19 and #203);
SHS (Certs. #508, #509, #291 and #500);
DSA (Certs. #181 and #204);
RSA (Certs. #166, #167 and #215);
RNG (Certs. #229 and #201)
strOtherAlgorithms Cast;
DES (Certs. #314 and #297);
Triple-DES (K3 mode;
non-compliant);
MD5HMAC;
MD5;
Arcfour;
Blowfish;
Twofish;
Diffie-Hellman (key agreement: key establishment methodology provides 112 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
RSA (key wrapping;
key establishment methodology provides 80 bits of encryption strength;
non-compliant)
strConfiguration Multi-chip standalone
memModuleDescription The Nokia VPN Applicances are full-featured enterprise systems designed for small to medium enterprises, with Service Provider flexibility and rapid serviceability option in a single rack space. When combined with Check Point VPN-1 these platforms provide reliable, easy to manage distributed security and access.
intModuleCount 1
memAdditionalNotes 09/26/07: Added firmware versions IPSO 4.1 with Check Point VPN-1 NGX (R60) [HFA-03], additional algorithm certificate references and updated Security Policy.
05/28/09: Updated vendor name, address, POC1 and POC2.
strFirstValidtionDate 09/05/07 00:00:00
strLabName CEAL
strValidationYear 2007