FIPS Verified Agent Integrations
This product is not supported for your selected
Datadog site. (
).
To find out if this integration is available in your organization, see your Datadog Integrations page or ask your organization administrator.
To initiate an exception request to enable this integration for your organization, email support@ddog-gov.com.
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
Overview
As part of the FedRAMP High effort, several integrations have been verified for FIPS 140-2 compliance. Integrations that are not mentioned below may function in compliance with FIPS 140-2 but have not been tested internally.
This guide is for customers that require FIPS compliant services and use Datadog integrations.
Enabling FIPS mode for a supported integration
To ensure compliance, make sure to use an HTTPS endpoint whenever possible and follow the integration-specific instructions below.
Integrations marked out of the box (“OOTB”) require no further configuration.
| Integration | Configuration |
|---|
| Amazon MSK | OOTB |
| Apache | OOTB |
| ArgoCD | OOTB |
| Azure Active Directory | OOTB |
| CoreDNS | OOTB |
| Elasticsearch | OOTB |
| Envoy | OOTB |
| Haproxy | OOTB |
| Istio | OOTB |
| Kafka | To enable TLS make sure to follow the JMXFetch FIPS-140 mode guide. |
| MongoDB | The tls option must be set to true through the integration configuration. |
| MySQL | The ssl option must be set through the integration configuration. |
| Nginx | OOTB |
| Php-fpm | Even though the php_fpm integration uses the random module, that use is restricted to randomizing the retry delay. |
| Postfix | OOTB |
| RabbitMQ | OOTB |
| Redis | The ssl option must be enabled through the integration configuration. |
| SSH | OOTB |
| TLS | OOTB |
| Tomcat | To enable TLS make sure to follow the JMXFetch FIPS-140 mode guide. |
| Vault | OOTB |
| vSphere | Both ssl_verify and rest_api_options > tls_verify need to be set to true if using the vSphere REST API to get tags (collect_tags: true). |
| Windows Service | OOTB |
| Zookeeper | The use_tls option must be enabled through the integration configuration. |
Configuring the IIS integration to query remote systems is discouraged. It relies on a Windows API for cryptography, which Datadog cannot control.
Further reading
