
3
Cisco 1721, 1760, 2621XM, 2651XM, 2691, 3725, and 3745 Modular Access Routers and 7206-VXR NPE-400 Router FIPS 140-2 Non-Proprietary
OL-6083-01
The Cisco 1721, 1760, 2621XM, 2651XM, 2691, 3725, 3745, and 7206 VXR NPE-400 Routers
With the exception of this Non-Proprietary Security Policy, the FIPS 140-2 Certification Submission
Documentation is Cisco-proprietary and is releasable only under appropriate non-disclosure agreements.
For access to these documents, please contact Cisco Systems.
The Cisco 1721, 1760, 2621XM, 2651XM, 2691, 3725, 3745, and 7206
VXR NPE-400 Routers
Branch office networking requirements are dramatically evolving, driven by web and e-commerce
applications to enhance productivity and merging the voice and data infrastructure to reduce costs. The
Cisco 1721, 1760, 2621XM, 2651XM, 2691, 3725, 3745, and 7206 VXR NPE-400 modular
multi-service routers offer versatility, integration, and security to branch offices. With numerous WAN
Interface Cards (WICs) and Network Modules (NMs) available, the modular architecture of the Cisco
router easily allows interfaces to be upgraded to accommodate network expansion. The Cisco 1721,
1760, 2621XM, 2651XM, 2691, 3725, 3745, and 7206 VXR NPE-400 provide a scalable, secure,
manageable remote access server that meets FIPS 140-2 Level 2 requirements as a multiple-chip
embedded module. This section describes the general features and functionality provided by the Cisco
1721, 1760, 2621XM, 2651XM, 2691, 3725, 3745, and 7206 VXR NPE-400 routers. Additional
adapters (e.g. WICs and other modules) are excluded from the validation.
•
The Cisco 1721/1760 Cryptographic Module, page 4
•
Cisco 1721 and 1760 Module Interfaces, page 5
•
The Cisco 2621XM/2651XM Cryptographic Module, page 10
•
Cisco 2621XM and 2651XM Module Interfaces, page 10
•
The Cisco 2691 Cryptographic Module, page 13
•
Cisco 2691 Module Interfaces, page 14
•
The Cisco 3725/3745 Cryptographic Module, page 18
•
Cisco 3725 and 3745 Module Interfaces, page 18
•
The Cisco 7206 VXR NPE-400 Cryptographic Module, page 24
•
Cisco 7206 VXR NPE-400 Module Interfaces, page 25
•
Roles and Services, page 27
•
Physical Security, page 29
•
Cryptographic Key Management, page 36
•
Self-Tests, page 42