---
title: "FIPS 140-3 compliance in Trellix DLP Network and Trellix DLP Discover"
slug: "clone-fips-140-3-cryptographic-compliance-in-trellix-dlp-network-appliances"
updated: 2026-11-05T14:30:37Z
published: 2026-11-05T14:30:37Z
canonical: "docs.trellix.com/clone-fips-140-3-cryptographic-compliance-in-trellix-dlp-network-appliances"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# FIPS 140-3 compliance in Trellix DLP Network and Trellix DLP Discover

Trellix DLP Network and Trellix DLP Discover integrates with OpenSSL to comply with the FIPS 140-3 standard. This integration automatically activates FIPS 140-3 mode at runtime across enterprise endpoints without manual configuration. Through this standard, all hardware, software, and firmware modules meet rigorous, independently tested requirements for encryption, key management, and tamper resistance. All operations comply with federal security mandates and enterprise security standards.

## Verify FIPS status in DLP Network Appliances

> [!NOTE]
> Note
> 
> Modifying the FIPS status can cause an immediate kernel restart.

In the command line, run these commands to verify that Trellix DLP Network appliance is FIPS 140-3 compliant:

1. Check kernel FIPS status

`# cat /proc/sys/crypto/fips_enabled`

`1`

`# cat /proc/cmdline | grep fips`

`BOOT_IMAGE=/vmlinuz-5.15.211-1.11.11.200.x86_64 ro root=LABEL=root quiet nmi_watchdog=2 fsck.repair=yes vga=0x317 fips=1 pci=use_crs elevator=noop rootfstype=ext4`

1. Check for the OpenSSL FIPS providers

`# openssl list -providers`

`Providers:`

`base`

`name: OpenSSL Base Provider`

`version: 3.5.8`

`status: active`

`default`

`name: OpenSSL Default Provider`

`version: 3.5.8`

`status: active`

`fips`

`name: OpenSSL FIPS Provider`

`version: 3.1.2`

`status: active`

`legacy`

`name: OpenSSL Legacy Provider`

`version: 3.5.8`

`status: active`

1. Verify if md5 fails

`# openssl md5 /dev/null`

`Error setting digest`

### Verify FIPS status on DLP Discover

**Verify FIPS status in Trellix ePO console**

You can verify the status of FIPS in Trellix ePO console in the following path.

1. In Trellix ePO, select **Menu** > **Systems** > **System Tree** > **Workgroup**.
2. Select the workgroup, then select the Products tab.
3. Locate FIPS status and FIPS Provider Version in the General section.

**Verify FIPS status in log file**

1. Run a Discovery Scan from the Trellix ePO console to generate active log events on the server.
2. Navigate to the following directory on the DLP Discover server host:

`C:\Program data\McAfee\DiscoverServer\Logs`

1. Open the latest log file and search for the FIPS initialization entry to confirm that cryptographic modules are running in FIPS mode.