Juniper SSG-350M-SH User Manual

FIPS 140-2 SECURITY POLICY
Juniper Networks, Inc.
SSG 320M and SSG 350M
HW P/N SSG-320M-SB, SSG-320M-SH, SSG-320M-SB-TAA, SSG-320M-SH-TAA, SSG-320M-SB-DC-N-TAA,
SSG-320M-SH-DC-N-TAA, SSG-350M-SB, SSG-350M-SH, SSG-350M-SB-TAA, SSG-350M-SH-TAA, SSG-
350M-SB-DC-N-TAA, SSG-350M-SH-DC-N-TAA , FW Version ScreenOS 6.3.0r6

Juniper SSG-350M-SH Specifications

General

New Sessions Per Second	5, 000
Expansion Slots	2
Input Voltage	100-240 VAC
Operating Temperature	32°F to 104°F (0°C to 40°C)
Maximum Number of Users Supported	Unrestricted
Dimensions (HxWxD)	1.75 x 17.5 x 16.5 in (4.4 x 44.5 x 41.9 cm)
Fixed I/O	6 x 10/100/1000

Summary

Overview

Module Validation Level

Lists validation levels for FIPS 140-2 security requirement areas.

Roles and Services

User Roles

Defines Cryptographic Officer, User (Admin), and Read-Only User roles and their privileges.

Authentication

Strength of Authentication

Details password complexity requirements, case sensitivity, and login attempt handling.

Operation In FIPS Mode

Initial Configuration and Connection

Steps for initial setup via console or network ports, including default credentials and connection methods.

Firmware Management in FIPS

Enabling FIPS Mode

FIPS Mode Operating Restrictions

Security Rules

Module Self-Tests

FIPS Approved Algorithms

Zeroization Procedures

Physical Security Policy

Physical Security Inspection and Seals

SSG320M Tamper Seal Placement

SSG350M Tamper Seal Placement

Cryptographic Algorithm Validation

Critical Security Parameter Definitions

CSP Services Matrix