FIPS for ASA5505

[cperkins22]

Hello,

I have a client that now requires fips-140-2 compliance. In looking at other post as well as cisco's site. I'm have trouble determining if I need to purchase a fips enclosure in conjunction with the fips labels?

This document does speak to the asa5505 - http://www.cisco.com/en/US/docs/security/asa/asa70/hw/fips_asa.htm

This doc speaks to the asa5505 and wants to install a case - http://www.cisco.com/en/US/docs/security/asa/hw/maintenance/5505guide/install.html

Thanks for any help you can provide.

Sent from Cisco Technical Support iPad App

[nkarthikeyan]

Hi Perkins,

Yes. We have all set to use ASA 5500 series appliances  as a FIPS -140-2 Compliant. But you have use the settings defined for  FIPS compliance like it should be in single context mode, asa should be  in routed mode, fips has to be enabled, password recovery has to be  disabled, register value has to be set to skip the rommon mode while  booting.... etc.

Please check for the latest IOS which is approved by FIPS.

Please do rate if the given information helps.

By

Karthik