Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4768

Details

Module Name
Palo Alto Networks SD-WAN Virtual Instant-On Network (vION)
Standard
FIPS 140-3
Status
Active
Sunset Date
8/18/2026
Overall Level
1
Caveat
Interim Validation. When installed, initialized and configured as specified in section "Secure Operation" of the Security Policy and operated in approved mode
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
  • Documentation requirements: N/A
  • Cryptographic module security policy: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Palo Alto Networks SD-WAN Virtual Instant-On Network (vION) enables the integration of a diverse set of wide area network (WAN) connection types, improves application performance and visibility, enhances security and compliance, and reduces the overall cost and complexity of your WAN.
Tested Configuration(s)
  • KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 with PAA
  • KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 without PAA
Approved Algorithms
AES-CBC
AES-CBC
AES-CTR
AES-ECB
AES-GCM
AES-GCM
Counter DRBG
ECDSA KeyGen (FIPS186-4)
ECDSA KeyGen (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigVer (FIPS186-4)
HMAC DRBG
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KDF IKEv2
KDF SNMP
KDF SSH
KDF TLS
KDF TLS
RSA KeyGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigVer (FIPS186-4)
RSA SigVer (FIPS186-4)
SHA-1
SHA2-224
SHA2-224
SHA2-256
SHA2-256
SHA2-384
SHA2-384
SHA2-512
SHA2-512
Software Versions
6.1.2

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
certifications@paloaltonetworks.com
Phone: 408-753-4000
Jake Bajic
certifications@paloaltonetworks.com
Phone: 408-753-4000

Validation History

Date Type Lab
8/19/2024 Initial GOSSAMER SECURITY SOLUTIONS INC