STIGQter: STIG Summary: Fortinet FortiGate Firewall NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 05 Jan 2026:

The FortiGate device must use FIPS 140-2 approved algorithms for authentication to a cryptographic module.

DISA Rule

SV-234210r961050_rule

Vulnerability Number

V-234210

Group Title

SRG-APP-000179-NDM-000265

Rule Version

FGFW-ND-000255

Severity

CAT I

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# config system fips-cc
# set status enable
# end

Check Contents

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# get system status | grep -i fips
The output should be:
FIPS-CC mode: enable

If FIPS-CC mode parameter is not set to enable, this is a finding.

Vulnerability Number

V-234210

Documentable

False

Rule Version

FGFW-ND-000255

Severity Override Guidance

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# get system status | grep -i fips
The output should be:
FIPS-CC mode: enable

If FIPS-CC mode parameter is not set to enable, this is a finding.

Check Content Reference

M

Target Key

5260