Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #4719

Details

Module Name
Palo Alto Networks SD-WAN Instant-On Network (ION) Devices ION 1200, ION 1200-S, ION 3200, ION 5200, and ION 9200
Standard
FIPS 140-3
Status
Active
Sunset Date
7/10/2029
Overall Level
2
Caveat
Interim Validation. The tamper evident seals installed as indicated in the Security Policy
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
Multi-Chip Stand Alone
Description
The Palo Alto Networks SD-WAN Instant-On Network (ION) Devices (ION 1200, ION 1200-S, ION 3200, ION 5200 and ION 9200) enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of your WAN.
Tested Configuration(s)
  • N/A
Approved Algorithms
AES-CBC
A3563
AES-CBC
A3564
AES-CBC
A3565
AES-CTR
A3563
AES-ECB
A3563
AES-GCM
A3563
AES-GCM
A3564
Counter DRBG
A3563
ECDSA KeyGen (FIPS186-4)
A3563
ECDSA KeyGen (FIPS186-4)
A3564
ECDSA SigGen (FIPS186-4)
A3563
ECDSA SigVer (FIPS186-4)
A3563
HMAC DRBG
A3564
HMAC-SHA-1
A3563
HMAC-SHA2-224
A3563
HMAC-SHA2-256
A3563
HMAC-SHA2-256
A3564
HMAC-SHA2-256
A3565
HMAC-SHA2-384
A3563
HMAC-SHA2-384
A3564
HMAC-SHA2-384
A3565
HMAC-SHA2-512
A3563
HMAC-SHA2-512
A3565
KAS-ECC-SSC Sp800-56Ar3
A3563
KAS-ECC-SSC Sp800-56Ar3
A3564
KDF IKEv2
A3563
KDF SNMP
A3563
KDF SSH
A3563
KDF TLS
A3563
KDF TLS
A3564
RSA KeyGen (FIPS186-4)
A3563
RSA SigGen (FIPS186-4)
A3563
RSA SigVer (FIPS186-4)
A3563
RSA SigVer (FIPS186-4)
A3564
RSA SigVer (FIPS186-4)
C170
SHA-1
A3563
SHA-1
C170
SHA2-224
A3563
SHA2-224
A3564
SHA2-256
A3563
SHA2-256
A3564
SHA2-256
A3565
SHA2-256
C170
SHA2-384
A3563
SHA2-384
A3564
SHA2-384
A3565
SHA2-512
A3563
SHA2-512
A3564
SHA2-512
A3564
SHA2-512
A3565
Hardware Versions
[ION 1200, ION 1200-C-NA, ION 1200-C-ROW, ION 1200-C-5G-WW, ION 1200-S, ION 1200-S-C-NA, ION 1200-S-C-ROW, ION 1200-S-C-5G-WW, ION 3200] with FIPS Kit P/N 920-000363, and [ION 5200 and ION 9200] with FIPS Kit P/N 920-000333
Firmware Versions
6.1.2

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
[email protected]
Phone: 408-753-4000
 Jake Bajic
[email protected]
Phone: 408-753-4000

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
7/11/2024 Initial Gossamer Security Solutions