Security Policy

Level 2 Validation

Version 2.4

November 19, 2004

Introduction

This is the non-proprietary Cryptographic Module Security Policy for the Cisco 1721, 1760, 2621XM,

2651XM, 2691, 3725, 3745, and 7206 VXR NPE-400 routers. This security policy describes how the

routers meet the security requirements of FIPS 140-2, and how to operate the routers in a secure FIPS

140-2 mode. This policy was prepared as part of the Level 2 FIPS 140-2 certification of the routers.

FIPS 140-2 (Federal Information Processing Standards Publication 140-2—Security Requirements for

Cryptographic Modules) details the U.S. Government requirements for cryptographic modules. More

information about the FIPS 140-2 standard and validation program is available on the NIST website at

http://csrc.nist.gov/cryptval/.

This document contains the following sections:

•

Corporate Headquarters:

Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA

Introduction, page 1

The Cisco 1721, 1760, 2621XM, 2651XM, 2691, 3725, 3745, and 7206 VXR NPE-400 Routers,

page 3

Secure Operation of the Cisco 1721, 1760, 2621XM, 2651XM, 2691, 3725, 3745, and 7206 VXR

NPE-400 Routers, page 42