Corporate Headquarters:© 2005 Cisco Systems, Inc. All rights reserved.Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USACisco 1841 Integrated Services Router withAIM-VPN/BPII-Plus and Cisco 2801Integrated Services Router withAIM-VPN/EPII-Plus FIPS 140-2 NonProprietary Security PolicyLevel 2 ValidationVersion 1.3December 14, 2005IntroductionThis document is the non-proprietary Cryptographic Module Security Policy for the Cisco 1841Integrated Services Routers with AIM-VPN/BPII-Plus and Cisco 2801 Integrated Services Routers withAIM-VPN/EPII-Plus. This security policy describes how the Cisco 1841 and Cisco 2801 IntegratedServices Routers (Hardware Version: 1841 or 2801; AIM-VPN/BPII-Plus Version: 1.0, Board Version:C1; AIM-VPN/EPII-Plus Version: 1.0, Board Version: D0; Firmware Version: 12.3(11)T03) meet thesecurity requirements of FIPS 140-2, and how to operate the router in a secure FIPS 140-2 mode. Thispolicy was prepared as part of the Level 2 FIPS 140-2 validation of the Cisco 1841 and Cisco 2801Integrated Services Routers.FIPS 140-2 (Federal Information Processing Standards Publication 140-2—Security Requirements forCryptographic Modules) details the U.S. Government requirements for cryptographic modules. Moreinformation about the FIPS 140-2 standard and validation program is available on the NIST website athttp://csrc.nist.gov/cryptval/.This document contains the following sections:• Introduction, page 1• Cisco 1841 and Cisco 2801 Routers, page 3• Secure Operation of the Cisco 1841 or Cisco 2801 router, page 21• Related Documentation, page 22