References
FortiGate-1000A/3600 FIPS 140-2 Security Policy
01-00000-0382-20081021
5
This document is a FIPS 140-2 Security Policy for Fortinet Incorporated's
FortiGate-1000A and 3600 Multi-Threat Security Systems. This policy describes
how the FortiGate-1000A and 3600 models (hereafter referred to as the `module'
or `modules') meet the FIPS 140-2 security requirements and how to operate the
modules in a FIPS compliant manner. This policy was created as part of the Level
2 FIPS 140-2 validation of the modules.
This document contains the following sections:
·
Security Level Summary
·
FIPS-CC Mode of Operation
·
FortiGate Module Description
·
Mitigation of Other Attacks
·
FIPS 140-2 Compliant Operation
·
Error mode
·
Non-FIPS Approved Services
The Federal Information Processing Standards Publication 140-2 - Security
Requirements for Cryptographic Modules (FIPS 140-2) details the United States
Federal Government requirements for cryptographic modules. Detailed
information about the FIPS 140-2 standard and validation program is available on
the NIST (National Institute of Standards and Technology) website at
http://csrc.nist.gov/groups/STM/cmvp/index.html.
References
This policy deals specifically with operation and implementation of the FortiGate
module in the technical terms of the FIPS 140-2 standard and the associated
validation program. Other FortiGate product manuals, guides and technical notes
can be found at the Fortinet technical documentation website at
http://docs.forticare.com.
Additional information on the entire FortiGate product line can be obtained from
the following sources:
·
Find general product information in the product section of the Fortinet
corporate website at http://www.fortinet.com/products.
·
Find on-line product support for registered products in the technical support
section of the Fortinet corporate website at http://www.fortinet.com/support
·
Find contact information for technical or sales related questions in the contacts
section of the Fortinet corporate website at http://www.fortinet.com/contact.
·
Find security information and bulletins in the FortiGuard Center of the Fortinet
corporate website at http://www.fortinet.com/FortiGuardCenter.