When the gateway is in FIPS approved mode, the gateway’s cryptographic module will only provide FIPS approved algorithms and the gateway will be FIPS compliant provided that all policies described in the Security Policy are strictly adhered to.

When not in FIPS approved mode, the gateway’s cryptographic module may provide both approved and unapproved algorithms and the gateway may freely operate in non-FIPS-compliant ways.

Details of the algorithms used in both FIPS approved and unapproved modes are described in the Security Policy.