Community discussions

MikroTik App
 
haydenbarker
just joined
Topic Author
Posts: 2
Joined: Thu Dec 05, 2019 11:36 pm

Mikrotik Hardware/RouterOS - NIST Compliant ?

Wed Sep 14, 2022 3:44 am

Hi There,

I was discussing Mikrotik today with a client and they were wondering if RouterOS and/or Mikrotik hardware was NIST Compliant, and if so, to what level. I don't know much about it, and neither did they, but they know that NIST compliance is coming down the pipe of their IT directives. They don't have any Mikrotik as yet, but they were interested, but if there is no NIST compliance, it's dead from the beginning as they will have to replace it when the NIST directive comes down.

Anyone have any comments ? Appreciate any relevant info.

Thanks !
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11439
Joined: Thu Mar 03, 2016 10:23 pm

Re: Mikrotik Hardware/RouterOS - NIST Compliant ?

Wed Sep 14, 2022 8:39 am

My guess is that you'll have to ask Mikrotik directly, via official support channels (e.g. via support@mikrotik.com ). You're welcome to post here any usable information you might get from them.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19105
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Mikrotik Hardware/RouterOS - NIST Compliant ?

Wed Sep 14, 2022 2:09 pm

If this is required for hardware vendors, and its not just for information systems, then I would imagine all large vendors will comply.
 
User avatar
woland
Member Candidate
Member Candidate
Posts: 258
Joined: Mon Aug 16, 2021 4:49 pm

Re: Mikrotik Hardware/RouterOS - NIST Compliant ?

Wed Sep 14, 2022 2:24 pm

Hi,
I do think, they were confusing NIPS with FIPS... Btw. both NIST releases lots of different standards and FIPS has many different parts. To complicate it: NIST has been working on FIPS.
Some vendors comply to FIPS standards, more specifically:

https://en.wikipedia.org/wiki/FIPS_140-3

NIST is rather known in security context for its governance framework. So thats probably wrong.
https://csrc.nist.gov/publications/deta ... ev-5/final

W
 
User avatar
jbl42
Member Candidate
Member Candidate
Posts: 214
Joined: Sun Jun 21, 2020 12:58 pm

Re: Mikrotik Hardware/RouterOS - NIST Compliant ?

Wed Sep 14, 2022 2:31 pm

"NIST compliance" is a very broad term. NIST (National Institute of Standards and Technology, a US Federal Organization) has many different standards in different revisions. Some of them also combine or overlap with US federal standards like FIPS.

I suggest to ask for the exact standard name and revision MikroTik HW would have to comply with. For ex. NISTIR 8320B is the relevant standard for cloud computing HW.
There should be a similar number for Network HW/Routers etc.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19105
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Mikrotik Hardware/RouterOS - NIST Compliant ?

Wed Sep 14, 2022 6:06 pm

Thanks jbl2, maybe this will be how we can get rid of OVPN on the MT for good! ;-)
May also impact zerotier and everything that is third party designed.

In other words, one can rampantly speculate, so facts and clarity are needed.
Thus far sounds wishy washy in terms of the impact on hardware products.

Who is online

Users browsing this forum: Ahrefs [Bot], svh79 and 75 guests