FIPS 140-2 Non-Proprietary Security Policy For Aruba AP-92 .

2y ago
9 Views
2 Downloads
962.84 KB
52 Pages
Last View : 1y ago
Last Download : 2m ago
Upload by : Milena Petrie
Transcription

FIPS 140-2 Non-Proprietary Security Policyfor Aruba AP-92, AP-93, AP-104, AP-105, AP-175Dell W-AP92, W-AP93, W-AP104, W-AP105 and WAP175Wireless Access PointsVersion 1.5December 2013Aruba Networks 1322 Crossman Ave.Sunnyvale, CA 94089-11131

2

Copyright 2013 Aruba Networks, Inc. Aruba Networks trademarks include,Aruba Networks , Aruba Wireless Networks , the registered Arubathe Mobile Edge Company logo, Aruba Mobility Management System , Mobile EdgeArchitecture , People Move. Networks Must Follow , RFProtect , Green Island . Allrights reserved. All other trademarks are the property of their respectiveowners. Open Source CodeCertain Aruba products include Open Source software code developed by thirdparties, including software code subject to the GNU General Public License(GPL), GNU Lesser General Public License (LGPL), or other Open Source Licenses.The Open Source code used can be found at this site:http://www.arubanetworks.com/open sourceLegal NoticeThe use of Aruba Networks, Inc. switching platforms and software, by allindividuals or corporations, to terminate other vendors’ VPN client devicesconstitutes complete acceptance of liability by that individual or corporationfor this action and indemnifies, in full, Aruba Networks, Inc. from any and alllegal actions that might be taken against it with respect to infringement ofcopyright on behalf of those vendors.WarrantyThis hardware product is protected by the standard Aruba warranty of one yearparts/labor. For more information, refer to the ARUBACARE SERVICE AND SUPPORTTERMS AND CONDITIONS.Altering this device (such as painting it) voids the warranty.Copyright 2013 Aruba Networks, Inc. Aruba Networks trademarks include , ArubaNetworks , Aruba Wireless Networks ,the registered Aruba the Mobile EdgeCompany logo, and Aruba Mobility Management System . Dell , the DELL logo,andPowerConnect are trademarks of Dell Inc.3

12INTRODUCTION .61.1ARUBA DELL RELATIONSHIP . 61.2ACRONYMS AND ABBREVIATIONS . 7PRODUCT OVERVIEW .82.1AP-92. 82.1.1Physical Description. 82.1.1.1Dimensions/Weight . 92.1.1.2Interfaces . 92.1.1.3Indicator LEDs . 92.2AP-93. 102.2.1Physical Description. 102.2.1.1Dimensions/Weight . 112.2.1.2Interfaces . 112.2.1.3Indicator LEDs . 112.3AP-104 SERIES . 122.3.1Physical Description. 132.3.1.1Dimensions/Weight . 132.3.1.2Interfaces . 132.3.1.3Indicator LEDs . 132.4AP-105 SERIES . 142.4.1Physical Description. 152.4.1.1Dimensions/Weight . 152.4.1.2Interfaces . 152.4.1.3Indicator LEDs . 152.5AP-175 SERIES . 162.5.13Physical Description. 172.5.1.1Dimensions/Weight . 172.5.1.2Interfaces . 172.5.1.3Indicator LEDs . 18MODULE OBJECTIVES .193.1SECURITY LEVELS . 193.2PHYSICAL SECURITY . 193.2.1Applying TELs . 193.2.2AP-92 TEL Placement . 203.2.2.1To detect access to restricted ports: . 203.2.2.2To detect opening of the chassis cover: . 203.2.3AP-93 TEL Placement . 234

3.2.3.1To detect access to restricted ports: . 233.2.3.2To detect opening of the chassis cover: . 233.2.4AP-104 TEL Placement . 253.2.4.1To detect opening of the chassis cover: . 253.2.4.2To detect access to restricted ports: . 253.2.5AP-105 TEL Placement . 273.2.5.1To detect opening of the chassis cover: . 283.2.5.2To detect access to restricted ports: . 283.2.63.2.6.1To detect access to restricted ports: . 303.2.6.2To detect opening of the chassis cover: . 303.2.73.34AP-175 TEL Placement . 30Inspection/Testing of Physical Security Mechanisms . 32MODES OF OPERATION . 333.3.1Configuring Remote AP FIPS Mode . 333.3.2Configuring Control Plane Security (CPSec) protected AP FIPS mode . 343.3.3Configuring Remote Mesh Portal FIPS Mode . 353.3.4Configuring Remote Mesh Point FIPS Mode . 363.3.5Verify that the module is in FIPS mode . 373.4OPERATIONAL ENVIRONMENT. 373.5LOGICAL INTERFACES . 37ROLES, AUTHENTICATION AND SERVICES .394.1ROLES . 394.1.1Crypto Officer Authentication . 404.1.2User Authentication . 404.1.3Wireless Client Authentication . 404.1.4Strength of Authentication Mechanisms . 404.2SERVICES . 424.2.1Crypto Officer Services. 424.2.2User Services . 434.2.3Wireless Client Services . 444.2.4Unauthenticated Services . 455CRYPTOGRAPHIC ALGORITHMS .466CRITICAL SECURITY PARAMETERS .477SELF TESTS.515

1 IntroductionThis document constitutes the non-proprietary Cryptographic Module Security Policy for the AP-92, AP93, AP-104, AP-105 and AP-175 Wireless Access Points with FIPS 140-2 Level 2 validation from ArubaNetworks. This security policy describes how the AP meets the security requirements of FIPS 140-2 Level2, and how to place and maintain the AP in a secure FIPS 140-2 mode. This policy was prepared as part ofthe FIPS 140-2 Level 2 validation of the product.FIPS 140-2 (Federal Information Processing Standards Publication 140-2, Security Requirements forCryptographic Modules) details the U.S. Government requirements for cryptographic modules. Moreinformation about the FIPS 140-2 standard and validation program is available on the National Institute ofStandards and Technology (NIST) Web-site This document can be freely distributed.1.1 Aruba Dell RelationshipAruba Networks is the OEM for the Dell PowerConnect W line of products. Dell products are identical tothe Aruba products other than branding and Dell software is identical to Aruba software other thanbranding. For example, Aruba "AP-92-F1" is equivalent to Dell "W-AP92-F1", and "ArubaOS 6.12.3FIPS " is equivalent to "DELL PCW 6.1.2.3-FIPS”Table 1 - Corresponding Aruba and Dell Part NumbersArubaNumberPartAruba FirmwareDell CorrespondingPart NumberDell FirmwareAP-92-F1ArubaOS 6.1.2.3-FIPS,ArubaOS 6.1.4.1-FIPS,ArubaOS 6.1.4.5-FIPS,ArubaOS 6.1.4.7-FIPSW-AP92-F1DELL PCW 6.1.2.3-FIPS,DELL PCW 6.1.4.1-FIPS,DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSAP-93-F1ArubaOS 6.1.2.3-FIPS,ArubaOS 6.1.4.1-FIPS,ArubaOS 6.1.4.5-FIPS,ArubaOS 6.1.4.7-FIPSW-AP93-F1DELL PCW 6.1.2.3-FIPS,DELL PCW 6.1.4.1-FIPS,DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSAP-104-F1ArubaOS 6.1.2.3-FIPS,ArubaOS 6.1.4.1-FIPS,ArubaOS 6.1.4.5-FIPS,ArubaOS 6.1.4.7-FIPSW-AP104-F1DELL PCW 6.1.2.3-FIPS,DELL PCW 6.1.4.1-FIPS,DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSAP-105-F1ArubaOS 6.1.2.3-FIPS,ArubaOS 6.1.4.1-FIPS,ArubaOS 6.1.4.5-FIPS,ArubaOS 6.1.4.7-FIPSW-AP105-F1DELL PCW 6.1.2.3-FIPS,DELL PCW 6.1.4.1-FIPS,DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSAP-175P-F1ArubaOS 6.1.2.3-FIPS,ArubaOS 6.1.4.1-FIPS,ArubaOS 6.1.4.5-FIPS,ArubaOS 6.1.4.7-FIPSW-AP175P-F1DELL PCW 6.1.2.3-FIPS,DELL PCW 6.1.4.1-FIPS,DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSAP-175AC-F1ArubaOS 6.1.2.3-FIPS,ArubaOS 6.1.4.1-FIPS,ArubaOS 6.1.4.5-FIPS,ArubaOS 6.1.4.7-FIPSW-AP175AC-F1DELL PCW 6.1.2.3-FIPS,DELL PCW 6.1.4.1-FIPS,DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPS6

AP-175DC-F1ArubaOS 6.1.2.3-FIPS,ArubaOS 6.1.4.1-FIPS,ArubaOS 6.1.4.5-FIPS,ArubaOS 6.1.4.7-FIPSW-AP175DC-F1DELL PCW 6.1.2.3-FIPS,DELL PCW 6.1.4.1-FIPS,DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSNOTE: References to Aruba, ArubaOS, Aruba AP-92, Aruba AP-93, Aruba AP-104, Aruba AP-105and Aruba AP-175 wireless access points apply to both the Aruba and Dell versions of these productsand documentation.1.2 Acronyms and TPWLANAdvanced Encryption StandardAccess PointCipher Block ChainingCommand Line InterfaceCrypto OfficerControl Plane Security protectedCommunications Security Establishment CanadaCritical Security ParameterExternal Crypto OfficerElectromagnetic CompatibilityElectromagnetic InterferenceFast EthernetGigabit EthernetGigahertzHashed Message Authentication CodeHertzInternet Key ExchangeInternet Protocol securityKnown Answer TestKey Encryption KeyLayer-2 Tunneling ProtocolLocal Area NetworkLight Emitting DiodeSecure Hash AlgorithmSimple Network Management ProtocolSerial & Power Over EthernetTamper-Evident LabelTrivial File Transfer ProtocolWireless Local Area Network7

2 Product OverviewThis section introduces the various Aruba Wireless Access Points, providing a brief overview and summaryof the physical features of each model covered by this FIPS 140-2 security policy.2.1 AP-92This section introduces the Aruba AP-92 Wireless Access Point (AP) with FIPS 140-2 Level 2 validation.It describes the purpose of the AP, its physical attributes, and its interfaces.Figure 1 - AP-92 Wireless Access PointThe Aruba AP-92 is robust-performance 802.11n (2x2:2) MIMO, single radio supporting 2.4 GHz or 5GHz (802.11a/ b/g/n), indoor wireless access points capable of delivering wireless data rates of up to300Mbps. This multi-function access point provides wireless LAN access, air monitoring, and wirelessintrusion detection and prevention. The access point works in conjunction with Aruba Mobility Controllersto deliver high-speed, secure user-centric network services in education, enterprise, finance, government,healthcare, and retail applications.2.1.1 Physical DescriptionThe Aruba AP-92 series Access Point is a multi-chip standalone cryptographic module consisting ofhardware and software, all contained in a hard plastic case. The module contains 802.11 a/b/g/n transceiverand supports external antennas through dual, detachable antenna interfaceThe plastic case physically encloses the complete set of hardware and software components and representsthe cryptographic boundary of the module.The Access Point configuration validated during the cryptographic module testing included:Aruba Part NumberDell Corresponding Part NumberAP-92-F1W-AP92-F18

The exact firmware versions validated were: 2.1.1.1ArubaOS 6.1.2.3-FIPS, ArubaOS 6.1.4.1-FIPS, ArubaOS 6.1.4.5-FIPS, ArubaOS 6.1.4.7-FIPSDELL PCW 6.1.2.3-FIPS, DELL PCW 6.1.4.1-FIPS, DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSDimensions/WeightThe AP has the following physical dimensions: 2.1.1.2120 mm x 130 mm x 35 mm (4.7" x 5.1" x 1.4")255 g (9 oz)InterfacesThe module provides the following network interfaces: 1 x 10/100/1000 Base-T Ethernet (RJ45) Auto-sensing link speed and MDI/MDX Antennao 2x RP-SMA antenna interfaces (supports up to 2x2 MIMO with spatial diversity)1 x RJ-45 console interfaceThe module provides the following power interfaces: 48 V DC 802.3af power over Ethernet 12 V DC for external AC supplied power (adapter sold separately)2.1.1.3Indicator LEDsThere are 4 bicolor (power, ENET and WLAN) LEDs which operate as follows:Table 2- AP-92 Indicator LEDsLabelFunctionActionStatusPWRAP power / ready statusOffNo power to APRedInitial power-up conditionFlashing – GreenDevice booting, not readyOn – GreenDevice readyOffEthernet link unavailableOn – Amber10/100MbsnegotiatedOn – Green1000Mbs Ethernet link negotiatedFlashingEthernet link activityOff2.4GHz radio disabledOn – Amber2.4GHz radio enabled in WLANmodeENET11b/g/nEthernet Network LinkStatus / Activity2.4GHz Radio Status9Ethernetlink

Label11a/nFunction5GHz Radio StatusActionStatusOn – Green2.4GHz radio enabled in 802.11nmodeFlashing - Green2.4GHz Air monitor or RF protectsensorOff5GHz radio disabledOn - Amber5GHz radio enabled in WLANmodeOn – Green5GHz radio enabled in 802.11nmodeFlashing - Green5GHz Air monitor or RF protectsensor2.2 AP-93This section introduces the Aruba AP-93 Wireless Access Point (AP) with FIPS 140-2 Level 2 validation.It describes the purpose of the AP, its physical attributes, and its interfaces.Figure 2 - AP-93 Wireless Access PointThe Aruba AP-93 is robust-performance 802.11n (2x2:2) MIMO, single radio supporting 2.4 GHz or 5GHz (802.11a/ b/g/n), indoor wireless access points capable of delivering wireless data rates of up to300Mbps. This multi-function access point provides wireless LAN access, air monitoring, and wirelessintrusion detection and prevention. The access point works in conjunction with Aruba Mobility Controllersto deliver high-speed, secure user-centric network services in education, enterprise, finance, government,healthcare, and retail applications.2.2.1 Physical DescriptionThe Aruba AP-93 series Access Point is a multi-chip standalone cryptographic module consisting ofhardware and software, all contained in a hard plastic case. The module contains 802.11 a/b/g/n transceiverand 2 integrated omni-directional multi-band dipole antenna elements (supporting up to 2x2 MIMO withspatial diversity).10

The plastic case physically encloses the complete set of hardware and software components and representsthe cryptographic boundary of the module.The Access Point configuration validated during the cryptographic module testing included:Aruba Part NumberDell Corresponding Part NumberAP-93-F1W-AP93-F1The exact firmware versions validated were: 2.2.1.1ArubaOS 6.1.2.3-FIPS, ArubaOS 6.1.4.1-FIPS, ArubaOS 6.1.4.5-FIPS, ArubaOS 6.1.4.7-FIPSDELL PCW 6.1.2.3-FIPS, DELL PCW 6.1.4.1-FIPS, DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSDimensions/WeightThe AP has the following physical dimensions: 2.2.1.2120 mm x 130 mm x 35 mm (4.7" x 5.1" x 1.4")255 g (9 oz)InterfacesThe module provides the following network interfaces: 1 x 10/100/1000 Base-T Ethernet (RJ45) Auto-sensing link speed and MDI/MDX Antenna (internal) 1 x RJ-45 console interfaceThe module provides the following power interfaces: 48 V DC 802.3af power over Ethernet 12 V DC for external AC supplied power (adapter sold separately)2.2.1.3Indicator LEDsThere are 4 bicolor (power, ENET and WLAN) LEDs which operate as follows:Table 3- AP-93 Indicator LEDsLabelFunctionActionStatusPWRAP power / ready statusOffNo power to APRedInitial power-up conditionFlashing – GreenDevice booting, not readyOn – GreenDevice readyOffEthernet link unavailableOn – Amber10/100MbsnegotiatedENETEthernet Network LinkStatus / Activity11Ethernetlink

Label11b/g/n11a/nFunction2.4GHz Radio Status5GHz Radio StatusActionStatusOn – Green1000Mbs Ethernet link negotiatedFlashingEthernet link activityOff2.4GHz radio disabledOn – Amber2.4GHz radio enabled in WLANmodeOn – Green2.4GHz radio enabled in 802.11nmodeFlashing - Green2.4GHz Air monitor or RF protectsensorOff5GHz radio disabledOn - Amber5GHz radio enabled in WLANmodeOn – Green5GHz radio enabled in 802.11nmodeFlashing - Green5GHz Air monitor or RF protectsensor2.3 AP-104 SeriesThis section introduces the Aruba AP-104 series Wireless Access Points (APs) with FIPS 140-2 Level 2validation. It describes the purpose of the AP, its physical attributes, and its interfaces.Figure 3 - AP-104 Wireless Access PointThe Aruba AP-104 is high-performance 802.11n (2x2:2) MIMO, dual-radio (concurrent 802.11a/n b/g/n)indoor wireless access points capable of delivering combined wireless data rates of up to 600Mbps. Thismulti-function access point provides wireless LAN access, air monitoring, and wireless intrusion detectionand prevention over the 2.4GHz and 5GHz RF spectrum. The access point works in conjunction withAruba Mobility Controllers to deliver high-speed, secure user-centric network services in education,enterprise, finance, government, healthcare, and retail applications.12

2.3.1 Physical DescriptionThe Aruba AP-104 Access Point is a multi-chip standalone cryptographic module consisting of hardwareand software, all contained in a hard plastic case. The module contains two dual-band 2.4-GHz/5-GHz802.11 a/b/g/n transceivers, and 4 x external antenna connectors (supporting up to 2x2 MIMO with spatialdiversity).The plastic case physically encloses the complete set of hardware and software components and representsthe cryptographic boundary of the module.The Access Point configuration validated during the cryptographic module testing included:Aruba Part NumberDell Corresponding Part NumberAP-104-F1W-AP104-F1The exact firmware versions validated were: 2.3.1.1ArubaOS 6.1.2.3-FIPS, ArubaOS 6.1.4.1-FIPS, ArubaOS 6.1.4.5-FIPS, ArubaOS 6.1.4.7-FIPSDELL PCW 6.1.2.3-FIPS, DELL PCW 6.1.4.1-FIPS, DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSDimensions/WeightThe AP has the following physical dimensions: 132 mm x 135 mm x 45 mm (5.2" x 5.3" x 1.8") 0.3 kg (10.56 oz)2.3.1.2InterfacesThe module provides the following network interfaces: 1 x 10/100/1000 Base-T Ethernet (RJ45) Auto-sensing link speed and MDI/MDX Antenna (external) 1 x RJ-45 console interfaceThe module provides the following power interfaces: 48 V DC 802.3af power over Ethernet 12 V DC for external AC supplied power (adapter sold separately)2.3.1.3Indicator LEDsThere are 4 bicolor (power, ENET and WLAN) LEDs which operate as follows:Table 4- AP-104 Indicator LEDsLabelFunctionActionStatusPWRAP power / ready statusOffNo power to APRedInitial power-up condition13

ENET11b/g/n11a/nEthernet NetworkStatus / Activity2.4GHz Radio Status5GHz Radio StatusLinkFlashing – GreenDevice booting, not readyOn – GreenDevice readyOffEthernet link unavailableOn – Amber10/100Mbs Ethernet link negotiatedOn – Green1000Mbs Ethernet link negotiatedFlashingEthernet link activityOff2.4GHz radio disabledOn – Amber2.4GHz radio enabled in WLAN modeOn – Green2.4GHz radio enabled in 802.11n modeFlashing - Green2.4GHz Air monitor or RFprotect sensorOff5GHz radio disabledOn - Amber5GHz radio enabled in WLAN modeOn – Green5GHz radio enabled in 802.11n modeFlashing - Green5GHz Air monitor or RFprotect sensor2.4 AP-105 SeriesThis section introduces the Aruba AP-105 series Wireless Access Points (APs) with FIPS 140-2 Level 2validation. It describes the purpose of the AP, its physical attributes, and its interfaces.Figure 3 - AP-105 Wireless Access PointThe Aruba AP-105 is high-performance 802.11n (2x2:2) MIMO, dual-radio (concurrent 802.11a/n b/g/n)indoor wireless access points capable of delivering combined wireless data rates of up to 600Mbps. Thismulti-function access point provides wireless LAN access, air monitoring, and wireless intrusion detectionand prevention over the 2.4GHz and 5GHz RF spectrum. The access point works in conjunction withAruba Mobility Controllers to deliver high-speed, secure user-centric network services in education,enterprise, finance, government, healthcare, and retail applications.14

2.4.1 Physical DescriptionThe Aruba AP-105 Access Point is a multi-chip standalone cryptographic module consisting of hardwareand software, all contained in a hard plastic case. The module contains two dual-band 2.4-GHz/5-GHz802.11 a/b/g/n transceivers, and 4 x integrated, omni-directional antenna elements (supporting up to 2x2MIMO with spatial diversity).The plastic case physically encloses the complete set of hardware and software components and representsthe cryptographic boundary of the module.The Access Point configuration validated during the cryptographic module testing included:Aruba Part NumberDell Corresponding Part NumberAP-105-F1W-AP105-F1The exact firmware versions validated were: 2.4.1.1ArubaOS 6.1.2.3-FIPS, ArubaOS 6.1.4.1-FIPS, ArubaOS 6.1.4.5-FIPS, ArubaOS 6.1.4.7-FIPSDELL PCW 6.1.2.3-FIPS, DELL PCW 6.1.4.1-FIPS, DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSDimensions/WeightThe AP has the following physical dimensions: 132 mm x 135 mm x 45 mm (5.2" x 5.3" x 1.8") 0.3 kg (10.56 oz)2.4.1.2InterfacesThe module provides the following network interfaces: 1 x 10/100/1000 Base-T Ethernet (RJ45) Auto-sensing link speed and MDI/MDX Antenna (internal) 1 x RJ-45 console interfaceThe module provides the following power interfaces: 48 V DC 802.3af power over Ethernet 12 V DC for external AC supplied power (adapter sold separately)2.4.1.3Indicator LEDsThere are 4 bicolor (power, ENET and WLAN) LEDs which operate as follows:Table 4- AP-105 Indicator LEDsLabelFunctionActionStatusPWRAP power / ready statusOffNo power to APRedInitial power-up conditionFlashing – GreenDevice booting, not readyOn – GreenDevice ready15

ENET11b/g/n11a/nEthernet NetworkStatus / Activity2.4GHz Radio Status5GHz Radio StatusLinkOffEthernet link unavailableOn – Amber10/100Mbs Ethernet link negotiatedOn – Green1000Mbs Ethernet link negotiatedFlashingEthernet link activityOff2.4GHz radio disabledOn – Amber2.4GHz radio enabled in WLAN modeOn – Green2.4GHz radio enabled in 802.11n modeFlashing - Green2.4GHz Air monitor or RFprotect sensorOff5GHz radio disabledOn - Amber5GHz radio enabled in WLAN modeOn – Green5GHz radio enabled in 802.11n modeFlashing - Green5GHz Air monitor or RFprotect sensor2.5 AP-175 SeriesThis section introduces the Aruba AP-175 series Wireless Access Points (APs) with FIPS 140-2 Level 2validation. It describes the purpose of the AP, its physical attributes, and its interfaces.Figure 4 - AP-175 Wireless Access PointThe Aruba AP-175 is high-performance 802.11n (2x2:2) MIMO, dual-radio (concurrent 802.11a/n b/g/n)indoor wireless access points capable of delivering combined wireless data rates of up to 600Mbps. Thismulti-function access point provides wireless LAN access, air monitoring, and wireless intrusion detectionand prevention over the 2.4GHz and 5GHz RF spectrum. The multifunction AP-175 is an affordable, fullyhardened outdoor 802.11n access point (AP) that provides maximum deployment flexibility in high-densitycampuses, storage yards, warehouses, container/transportation facilities, extreme industrial productionareas and other harsh environments.16

2.5.1 Physical DescriptionThe Aruba AP-175 Access Point is a multi-chip standalone cryptographic module consisting of hardwareand software, all contained in a hard case. The module contains two 802.11 a/b/g/n transceivers, and 4 x Ntype female interfaces (2 x 2.4 GHz, 2 x 5 GHz) for external antenna support (supports MIMO)The hard case physically encloses the complete set of hardware and software components and representsthe cryptographic boundary of the module.The Access Point configuration validated during the cryptographic module testing included:Aruba Part NumberDell Corresponding Part AP-175DC-F1W-AP175DC-F1The exact firmware versions validated were: 2.5.1.1ArubaOS 6.1.2.3-FIPS, ArubaOS 6.1.4.1-FIPS, ArubaOS 6.1.4.5-FIPS, ArubaOS 6.1.4.7-FIPSDELL PCW 6.1.2.3-FIPS, DELL PCW 6.1.4.1-FIPS, DELL PCW 6.1.4.5-FIPS,DELL PCW 6.1.4.7-FIPSDimensions/WeightThe AP has the following physical dimensions: 260 mm x 240 mm x 105 mm (10.2" x 9.4" x4.1") 3.25 kg (7 lb)2.5.1.2InterfacesThe module provides the following network interfaces: 1 x 10/100/1000 Base-T Ethernet (RJ45) Auto-sensing link speed and MDI/MDX Antennao 4 x N-Type female antenna interfaces1 x RJ-45 console interfaceThe module provides the following power interfaces: AP-175P:48-volt DC 802.3at power over Ethernet (PoE ) AP-175AC:100-240 volt AC from external AC power source AP-175DC:12-48 volt DC from external DC power source17

2.5.1.3Indicator LEDsThere is an array of LEDs which operate as follows:Table 5- AP-175 Indicator LEDsLabelLEDPositionFunctionActionStatusPWRD11AP power / system status

The access point works in conjunction with Aruba Mobility Controllers to deliver high-speed, secure user-centric network services in education, enterprise, finance, government, healthcare, and retail applications. 2.1.1 Physical Description The Aruba AP-92 series Access Point is a

Related Documents:

FIPS 140-2 Security Policy KeyPair FIPS Object Module for OpenSSL Page 4 of 18 1 Introduction This document is the non-proprietary security policy for the KeyPair FIPS Object Module for OpenSSL (FIPS 140-2 Cert. #3503), hereafter referred to as the Module. The Module is a software library providing a C language application program interface (API) for use by

Wireless Access Points with FIPS 140-2 Level 2 validation from Aruba Networks. This security policy describes how the AP meets the security requirements of FIPS 140-2 Level 2, and how to place and maintain the AP in a secure FIPS 140-2 mode. This policy was prepared as part of the FIPS 140-2 Level 2 validation of the product.

This Security Policy describes how the Dual Interface Security Controller SLE78 and Java Card Platform binary code meets the security requirements of FIPS 140-2 and CM’s operation in a secure FIPS 140-2 mode. This policy was prepared as part of the Level 3 FIPS 140-2 validation of the module. FIPS 140-2

LogRhythm FIPS Object Module FIPS 140-2 Security Policy Page 3 of 33 References Reference Full Specification Name [ANS X9.31] Digital Signatures Using Reversible Public Key Cryptography for the Financial Services Industry (rDSA) [FIPS 140-2] Security Requirements for Cryptographic modules, May 25, 2001 [FIPS 180-4] Secure Hash Standard

FIPS 140-2 mode. This policy was prepared as part of the Level 2 FIPS 140-2 validation of the module. Note This document may be copied in its entirety and without modification. All copies must include the copyright notice and statements on the last page. FIPS 140-2 (Federal Information Processing Standards Publication 140-2 — Security .

918 - OpenSSL FIPS Object Module v1.1.2 - 02/29/2008 140-2 L1 1051 - OpenSSL FIPS Object Module v 1.2 - 11/17/2008 140-2 L1 1111 - OpenSSL FIPS Runtime Module v 1.2 - 4/03/2009 140-2 L1 Note: Windows FIPS algorithms used in this product may have only been tested when the FIPS mode bit was set. While the

FIPS 140-2 Non-Proprietary Security Policy for WatchGuard Technologies Inc. Firebox Page 5 of 52 1 Introduction This document is a FIPS 140-2 Security Policy for WatchGuard [s Firebox Security System. This policy describes how the Firebox M270, M370, M470, M570, and M670 models (hereafter referred to as the

FortiOS 5.2 FIPS 140-2 Security Policy 01-525-296259-20151016 2 Overview This document is a FIPS 140-2 Security Policy for Fortinet Incorporated’s FortiOS 5.2 firmware, which runs on the FortiGate family of security appliances. This policy describes how the FortiOS 5.2 firmware (hereafter referred to as the ‘module’) meets the FIPS 140-2