Does Azure VPN Gateway support FIPS 140-2

Question

Hello there,

We have a requirement to establish a Site-to-Site VPN Tunnel, and would like to know whether Azure VPN Gateway is FIPS 140-2 compliant?

Thank you, Anand

Answer 1

Hello @AnandFranklin-3216 ,

Azure is built with a combination of hardware, commercially available operating systems (Linux and Windows), and Azure-specific version of Windows. Through the Microsoft Security Development Lifecycle (SDL), all Azure services use FIPS 140-2 approved algorithms for data security because the operating system uses FIPS 140-2 approved algorithms while operating at a hyper scale cloud.

You can use the industry-standard IPsec protocol to encrypt traffic between your corporate VPN gateway and Azure as well as between the VMs located on your Virtual Network. In accordance with the Public Key Infrastructure Operational Security Standard, which is a component of the Microsoft Security Policy, Microsoft leverages the cryptographic capabilities included in the Windows operating system for certificates and authentication mechanisms, which includes the use of cryptographic modules that meet the U.S. government's Federal Information Processing Standards (FIPS) 140-2 standard.

Please refer : https://learn.microsoft.com/en-us/microsoft-365/compliance/offering-fips-140-2?view=o365-worldwide
https://learn.microsoft.com/en-us/microsoft-365/compliance/office-365-encryption-in-the-microsoft-cloud-overview?view=o365-worldwide

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.

---

Please don’t forget to "Accept the answer" wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

Hi,

Something here might help:

Federal Information Processing Standard (FIPS) Publication 140-2
https://learn.microsoft.com/en-us/microsoft-365/compliance/offering-fips-140-2?view=o365-worldwide

Best regards,
Leon

Answer 3

Hello Gitarani,

The provided information is adequate and it answers my question.

Thank you, Anand