So the organization I work for is currently looking in to a new wireless solution and you cant beat the cost of Ubiquiti equipment. So my question is are the UniFi access points and the UniFI Switches FIPS compliant?

2 Spice ups

Don’t know off hand, maybe ask them directly?

Which FIPS code are you referring to specifically?

Edit: Looking at the forums it looks like the APs and EdgeRouters are ABLE to meet FIPS 140-2 but Ubiquiti hasn’t bothered to go through the certification process. This isn’t unusual, government isn’t a large enough market for them to justify the certification process costs. And FIPS certification costs really are stupidly high, even for government work.

Reminds me again why I stay away from public sector work.

1 Spice up

@GulfSailor yes 140-2 and “Reminds me again why I stay away from public sector work.” LOLZ

The UniFi APs are not FIPS certified, we have no current certification plans but may look into this in the future.

1 Spice up

Have to be FIPS certified? Co Cisco. Pretty much what government uses anyways.

I work in the public sector, your options are very limited due to the FIPS requirements. I actually just attended a CJIS FBI security awareness meeting\training and their recommendation\best practice was to not implement wireless at all!

Like said before your best bet is to go with major vendors.

You can comply with FIPS 140-2 & use UniFi (or any other AP) if you deploy a FIPS 140-2 certified VPN & use it for internal connections. At that point, you are relying on the encryption & certification of the VPN client, and the WiFi encryption (and certification) is irrelevant… it’s simply a form of media.

3 Spice ups