FIPS 140-2 Mode

Support

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Security > FIPS 140-2 Mode

FIPS 140-2 Mode

Help | Content Gateway | Version 7.7.3

FIPS (Federal Information Processing Standard) 140-2 is a U.S. government security standard for hardware and software cryptography modules. Modules certified against the standard assure government and other users that the cryptography in the system meets the stringent standard.

The cryptographic library used in Content Gateway version 7.7 has been submitted for FIPS 140-2 certification. Visit the Cryptographic Module Validation Program (CMVP) validation page for more information.

By default, FIPS 140-2 is not applied to SSL connections.

You can configure Content Gateway to enforce FIPS 140-2 on HTTPS connections.

When FIPS is enabled:

HTTPS connections use TLSv1

HTTPS connections use FIPS 140-2 approved algorithms

SSL Manager generates SHA-256 certificates in response to origin server certificate requests


	Warning Once FIPS is enabled the option is not reversible without a complete reinstall of Content Gateway. If Content Gateway is on an appliance, the appliance must be reimaged.

To enable FIPS 140-2 on HTTPS connections:

1.	In Content Gateway Manager go to Configure >Security > FIPS Security.

2.	Review the warning, select Enabled, and click Apply.

3.	If you are sure you want to enable FIPS, restart Content Gateway.

4.	If you do not want to enable FIPS, select Disable and click Apply.


	Note Even after FIPS 140-2 mode is enabled, by default, SHA-1 certificates continue to be used for logon to TRITON management consoles. See this Websense knowledge base article for instructions on how to create and install stronger SHA certificates: How do I create a stronger SHA certificate for Websense management consoles?

Go to the table of contents

Go to the previous page

Go to the next page

Go to the index

View or print as PDF

Security > FIPS 140-2 Mode