Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #4704

Details

Module Name
Palo Alto Networks SD-WAN Instant-On Network (ION) Devices ION 1200 and ION 9000
Standard
FIPS 140-3
Status
Active
Sunset Date
6/6/2029
Overall Level
2
Caveat
The tamper evident seals installed as indicated in the Security Policy
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
Multi-Chip Stand Alone
Description
The Palo Alto Networks Prisma SD-WAN ION 1200, ION 1200-C-NA, ION 1200-C-ROW, ION 1200-C-5G-WW devices are multi-chip standalone modules that enable integration of heterogeneous WAN links, provide confident integration of the cloud, improve application performance/visibility, and reduce overall cost and complexity of customers WAN. Prisma SD-WAN ION 9000 is a multi-chip standalone module designed for the data center to create a secure SD-WAN fabric across branches and data centers. It is designed to install seamlessly in the data center by peering with adjacent data center devices using traditional, standards-based routing protocols.
Tested Configuration(s)
  • N/A
Approved Algorithms
AES-CBC
A2385
AES-CBC
A2386
AES-CBC
A2387
AES-CBC
A2388
AES-CTR
A2385
AES-ECB
A2385
AES-GCM
A2385
AES-GCM
A2386
Counter DRBG
A2385
ECDSA KeyGen (FIPS186-4)
A2385
ECDSA KeyGen (FIPS186-4)
A2386
ECDSA KeyVer (FIPS186-4)
A2385
ECDSA KeyVer (FIPS186-4)
A2386
ECDSA SigGen (FIPS186-4)
A2385
ECDSA SigVer (FIPS186-4)
A2385
HMAC DRBG
A2386
HMAC-SHA-1
A2385
HMAC-SHA2-224
A2385
HMAC-SHA2-256
A2385
HMAC-SHA2-256
A2386
HMAC-SHA2-256
A2387
HMAC-SHA2-256
A2388
HMAC-SHA2-384
A2385
HMAC-SHA2-384
A2386
HMAC-SHA2-384
A2387
HMAC-SHA2-384
A2388
HMAC-SHA2-512
A2385
HMAC-SHA2-512
A2386
HMAC-SHA2-512
A2387
HMAC-SHA2-512
A2388
KAS-ECC-SSC Sp800-56Ar3
A2385
KAS-ECC-SSC Sp800-56Ar3
A2386
KDF TLS
A2386
RSA KeyGen (FIPS186-4)
A2385
RSA SigGen (FIPS186-4)
A2385
RSA SigVer (FIPS186-4)
A2385
RSA SigVer (FIPS186-4)
A2386
RSA SigVer (FIPS186-4)
C170
RSA SigVer (FIPS186-4)
RSA 1819
RSA SigVer (FIPS186-4)
RSA 1820
SHA-1
A2385
SHA-1
A2386
SHA-1
A2387
SHA-1
C170
SHA-1
SHS 2919
SHA-1
SHS 2920
SHA2-224
A2385
SHA2-224
A2386
SHA2-256
A2385
SHA2-256
A2386
SHA2-256
A2387
SHA2-256
A2388
SHA2-256
C170
SHA2-256
SHS 2919
SHA2-256
SHS 2920
SHA2-384
A2385
SHA2-384
A2386
SHA2-384
A2387
SHA2-384
A2388
SHA2-512
A2385
SHA2-512
A2386
SHA2-512
A2387
SHA2-512
A2388
Hardware Versions
[ION 1200, ION 1200-C-NA, ION 1200-C-ROW, and ION 1200-C-5G-WW] with FIPS Kit (P/N 920-000363), and ION 9000 with FIPS Kit (P/N 920-000311)
Firmware Versions
5.6.3

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Jake Bajic
[email protected]
Phone: 408-753-4000
 Amir Shahhosseini
[email protected]
Phone: 408-753-4000

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
6/7/2024 Initial Gossamer Security Solutions