Cryptographic Module Validation Program CMVP

Module Name

PAN-OS 10.1 Next-Generation Hardware Firewalls

Standard

FIPS 140-3

Status

Active

Sunset Date

10/15/2029

Overall Level

2

Caveat

When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper evident seals and Physical Kit installed as indicated in the Security Policy

Security Level Exceptions

• Roles, services, and authentication: Level 3
• Operational environment: N/A
• Non-invasive security: N/A
• Life-cycle assurance: Level 3
• Mitigation of other attacks: N/A
• Documentation requirements: N/A
• Cryptographic module security policy: N/A

Module Type

Hardware

Embodiment

Multi-Chip Stand Alone

Description

Palo Alto Networks offers a full line of next-generation security appliances that range from the PA-220, designed for enterprise remote offices, to the PA-7080, which is a modular chassis designed for high-speed datacenters. The platform architecture is based on our single-pass engine, PAN-OS, for networking, security, threat prevention, and management functionality that is consistent across all platforms. The devices differ only in capacities, performance, and physical configuration.

Tested Configuration(s)

• N/A

Approved Algorithms

Allowed Algorithms

MD5 (Only allowed as the PRF in TLS v1.1 per IG 2.4.A; Message digest used in TLSv1.0 / v1.1 KDF only)

Hardware Versions

910-000128 with Physical Kit 920-000084, 910-000147 with Physical Kit 920-000226, [910-000231, 910-000212, 910-000232, and 910-000230] with Physical Kit 920-000454, [910-000120 and 910-000119] with Physical Kit 920-000185, [910-000162, 910-000163, and 910-000164] with Physical Kit 920-000212, [910-000132, 910-000131, 910-000125, 910-000157, 910-000257, and 910-000357] with Physical Kit 920-000186, 910-000223 with components 920-000293, 910-000195, 910-000194, and 910-000204 with Physical Kit 920-000309, 910-000102 with components 910-000137, 910-000136, 910-000156, 910-000256, 910-000356, 910-000183, 910-0000014, 910-000169, 910-000185, 910-000285, 910-000385, and 910-000013 with Physical Kit 920-000112, and 910-000122 with components 910-000137, 910-000136, 910-000156, 910-000256, 910-000356, 910-000183, 910-0000014, 910-000169, 910-000186, 910-000286, 910-000386, and 910-000012 with Physical Kit 920-000119

Firmware Versions

10.1.5