XformersSecurityPolicy1941290129112921.pdf

Cisco 1905, Cisco 1921, Cisco 1941, Cisco 2901, Cisco 2911, and Cisco 2921 Integrated Services Routers (ISRs) Hardware versions: 1905[1][2], 1921[1][2], 1941[1][2], 2901[1][3], 2911[1][4], 2921[1][5], FIPS Kit (CISCO-FIPS- KIT=), Revision -B0[1], ISR: FIPS-SHIELD-1900=[2], FIPS- SHIELD-2901=[3], FIPS-SHIELD-2911=[4] and FIPS- SHIELD-2921=[5] Firmware versions: 15.1(2)T2A and 15.1(2)T3 FIPS 140-2 Non-Proprietary Security Policy Overall Level 2 (Sections 3 and 10 Level 3) Validation Version 0.12 July 2011 Introduction 3? References 3? FIPS 140-2 Submission Package 3? Module Description 4? Cisco 1905, Cisco 1921, Cisco 1941, Cisco 2901, Cisco 2911, and Cisco 2921 Integrated Services Routers (ISRs) 4? Module Validation Level 4? Cryptographic Boundary 6? Cryptographic Module Ports and Interfaces 6? Roles, Services, and Authentication 10? User Services 10? Cryptographic Officer Services 11? Unauthenticated User Services 11? Cryptographic Key/CSP Management 12? Cryptographic Algorithms 16? Approved Cryptographic Algorithms 16? Non-Approved Algorithms 16? Self-Tests 17? Physical Security 18? Module Opacity and Tamper Evidence 18? Secure Operation 36? Initial Setup 36? System Initialization and Configuration 36? IPSec Requirements and Cryptographic Algorithms 37? Protocols 37? Remote Access 38? Wireless Services 38? Cisco Unified Border Element (CUBE) TLS Configuration 38? Related Documentation 39? Obtaining Documentation 39? C 39? Product Documentation DVD 39? Ordering Documentation 40? Documentation Feedback 40? Cisco Product Security Overview 40? Reporting Security Problems in Cisco Products 41? Obtaining Technical Assistance 41? Cisco Technical Suppor