Juniper Networks vSRX Virtual Firewall
Juniper Networks, Inc. - FIPS 140 #3137
The vSRX delivers a complete and integrated virtual security solution, including unified threat management(UTM), intrusion detection and prevention (IDP), granular application control and robust networking. It provides seamless automated life cycle management capabilities making it an ideal solution for Service Providers, Cloud and Enterprise deployments. The vSRX supports Juniper Networks Contrail, OpenContrail, Openstack and other third-party solutions.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3137
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- SP 800-56Arev3 transition
- Vendor
- Juniper Networks, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Acumen Security
- First validated
- February 26, 2018
- Versions
- JUNOS 15.1X49 - D100
- Caveat
- When operated in FIPS mode
- Level exceptions
- Design Assurance: Level 3; Mitigation of Other Attacks: N/A; Physical Security: N/A; Roles, Services, and Authentication: Level 3
Algorithms
- AES
- CVL
- DRBG
- ECDSA
- HMAC
- KTS
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (25)
- AES 4719
- AES 4720
- AES 4723
- CVL 1362
- CVL 1391
- DRBG 1608
- DRBG 1609
- ECDSA 1166
- ECDSA 1167
- HMAC 3136
- HMAC 3137
- HMAC 3140
- KTS 2501
- KTS 2502
- KTS 3136
- KTS 3137
- RSA 2572
- RSA 2573
- SHS 3864
- SHS 3865
- SHS 3868
- SHS 3895
- Triple-DES 2501
- Triple-DES 2502
- Triple-DES 2505
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- JUNOS 15.1X49-D100 on VMWare ESXi 5.5 on a Server HP ProLiant DL380 Gen9 (single-user mode)
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain