1. Introduction
1.1 Purpose
This document is a non-proprietary Cryptographic Module Security Policy for the
Blue Coat SSL Visibility Appliance model SV2800. The SV2800 model should be
operated with the v3.5.2 build 961 firmware version. This policy was prepared as
part of the Level 2 FIPS 140-2 validation of the module, and may freely be
reproduced and distributed in its entirety (without modification).
Federal Information Processing Standards (FIPS) 140-2, Security Requirements for
Cryptographic Modules, specifies the U.S. and Canadian Governments'
requirements for cryptographic modules. The following pages describe how the
Blue Coat SSL Visibility Appliance meets these requirements and how to operate
the device in a mode compliant with FIPS 140-2.
csrc.nist.gov/groups/STM/cmvp/index.html.
In this document, the Blue Coat SSL Visibility Appliance model SV2800 is referred
to as the SV2800, the hardware module, the cryptographic module, or the module.
1.2 References
This document only deals with the operation and capabilities of the SV2800
within the technical terms of a FIPS 140-2 cryptographic module security policy.
More information on the SV2800 is available from the following sources:
full line of products from Blue Coat.
· The Blue Coat customer website, https://bto.bluecoat.com, contains
product documentation, software downloads, and other information on
the full line of products from Blue Coat.
contains contact information for answers to technical or sales-related questions
for the module.
1.3 Document Organization
This Security Policy is one document in the FIPS 140-2 Submission Package. In
addition to this document, the Submission Package contains:
· Vendor Evidence
· Finite State Machine
· Other supporting documentation as additional references
· Validation Submission Summary
2014 Blue Coat Systems This document may be freely reproduced & distributed whole & intact including this copyright notice.
5