Administration of the Avaya G350 Media Gateway - Avaya Support

FIPSSecurity levelThe cryptographic module meets the overall requirements applicable to Level 1 security ofFIPS 140-2.Table 1: Module security level specificationSecurity Requirements SectionLevelCryptographic Module Specification 1Module Port and Interfaces 1Roles, Services and Authentication 2Finite State Model 1Physical Security 1Operational EnvironmentN/ACryptographic Key Management 1EMI/EMC 1Self-Tests 1Design Assurance 3Mitigation of Other AttacksN/AOperational environmentThe FIPS 140-2 Area 6 Operational Environment requirements are not applicable because thedevice does not support the loading and execution of un-trusted code. Avaya digitally signsfirmware images of the crypto module using RSA SHA1 digital signature. Through thissignature, the crypto module verifies the authenticity of any update to its firmware image.Assumptions of rolesThe cryptographic module supports eight distinct operator roles: Cryptographic-Officer, Read/Write User, Read-only User, RADIUS Server, OSPF Router Peer, PPPoE Client, IKE Peer, andSerial Number Peer.The cryptographic module enforces the separation of roles using operator authentication. Referto Table 14 for further information.294 Administration of the Avaya G350 Media Gateway