Trellix DLP Network and Trellix DLP Discover integrates with OpenSSL to comply with the FIPS 140-3 standard. This integration automatically activates FIPS 140-3 mode at runtime across enterprise endpoints without manual configuration. Through this standard, all hardware, software, and firmware modules meet rigorous, independently tested requirements for encryption, key management, and tamper resistance. All operations comply with federal security mandates and enterprise security standards.
Verify FIPS status in DLP Network Appliances
Note
Modifying the FIPS status can cause an immediate kernel restart.
In the command line, run these commands to verify that Trellix DLP Network appliance is FIPS 140-3 compliant:
Check kernel FIPS status
# cat /proc/sys/crypto/fips_enabled
1
# cat /proc/cmdline | grep fips
BOOT_IMAGE=/vmlinuz-5.15.211-1.11.11.200.x86_64 ro root=LABEL=root quiet nmi_watchdog=2 fsck.repair=yes vga=0x317 fips=1 pci=use_crs elevator=noop rootfstype=ext4
Check for the OpenSSL FIPS providers
# openssl list -providers
Providers:
base
name: OpenSSL Base Provider
version: 3.5.8
status: active
default
name: OpenSSL Default Provider
version: 3.5.8
status: active
fips
name: OpenSSL FIPS Provider
version: 3.1.2
status: active
legacy
name: OpenSSL Legacy Provider
version: 3.5.8
status: active
Verify if md5 fails
# openssl md5 /dev/null
Error setting digest
Verify FIPS status on DLP Discover
Verify FIPS status in Trellix ePO console
You can verify the status of FIPS in Trellix ePO console in the following path.
In Trellix ePO, select Menu > Systems > System Tree > Workgroup.
Select the workgroup, then select the Products tab.
Locate FIPS status and FIPS Provider Version in the General section.
Verify FIPS status in log file
Run a Discovery Scan from the Trellix ePO console to generate active log events on the server.
Navigate to the following directory on the DLP Discover server host:
C:\Program data\McAfee\DiscoverServer\Logs
Open the latest log file and search for the FIPS initialization entry to confirm that cryptographic modules are running in FIPS mode.