U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #3888

Details

Module Name
PAN-OS 9.0 VM-Series
Standard
FIPS 140-2
Status
Active
Sunset Date
4/8/2026
Validation Dates
04/09/2021
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Palo Alto Networks VM-Series allows you to protect your applications and data from cyber threats with our next-generation firewall security, and advanced threat prevention features.
Tested Configuration(s)
  • KVM on CentOS 7.5 running on a Dell Power Edge R730 with Intel Xeon E5-2630 CPU
  • Microsoft Hyper-V 2012 r2 running on a Dell PowerEdge R730 with Intel Xeon E5-2640 CPU (single user mode)
  • VMware ESXi v6.5 running on a Dell PowerEdge R730 with Intel Xeon E5-2640 CPU
FIPS Algorithms
AES Cert. #C999
CKG vendor affirmed
CVL Cert. #C999
DRBG Cert. #C999
DSA Cert. #C999
ECDSA Cert. #C999
HMAC Cert. #C999
KAS-SSC vendor affirmed
KTS AES Cert. #C999 and HMAC Cert. #C999; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Cert. #C999; key establishment methodology provides 128 or 256 bits of encryption strength
RSA Cert. #C999
SHS Cert. #C999
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Software Versions
9.0.9-h1

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
ashahhosse@paloaltonetworks.com
Phone: 408-753-4000
Jake Bajic
jbajic@paloaltonetworks.com
Phone: 408-753-4000

Lab

UL VERIFICATION SERVICES INC
NVLAP Code: 100432-0