kbrain

Cisco ASA and ISA Cryptographic Modules

Cisco Systems, Inc. - FIPS 140 #3807

historicalLevel 2

The core operating system for the Cisco ASA and ISA series appliances. From a small desktop form factor, rack mounted units, to ruggedized unit offering stateful firewall with a comprehensive range of next-generation network security services.

Key facts

Scheme
FIPS 140
Certificate
3807
Standard
FIPS 140-2
Security level
Level 2
Status
historical
Vendor
Cisco Systems, Inc.
Module type
Hardware
Embodiment
Multi-Chip Stand Alone
Lab
Gossamer Security Solutions
First validated
February 2, 2021
Versions
ASA 5506-X[1][2], ASA 5506H-X[1][2], ASA 5506W-X[1][2], ASA 5508-X[1][3], ASA 5516-X[1][4], ASA 5525-X[1], ASA 5545-X[1], ASA 5555-X[1], ISA 3000-4C[1] and ISA 3000-2C2F[1] with [AIR-AP-FIPSKIT=][1], [ASA5506-FIPS-KIT=][2], [ASA5508-FIPS-KIT=][3] and [ASA5516-FIPS-KIT=][4]; 9.12
Caveat
When operated in FIPS mode. When installed with the tamper evident seals and opacity shields, initialized and configured as specified in Section 3 of the Security Policy

Algorithms

  • AES
  • CVL
  • DRBG
  • ECDSA
  • HMAC
  • RSA
  • SHS
  • Triple-DES

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain