Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5326

Details

Module Name
PAN-OS 11.1/11.2 running on PA-400 Series, PA-800 Series, PA-1400 Series, PA-3200 Series, PA-3400 Series, PA-5200 Series, PA-5400 Series, PA-5450, PA-7000 Series, and PA-7500 NGFWs
Standard
FIPS 140-3
Status
Active
Sunset Date
6/9/2031
Overall Level
2
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy
Security Level Exceptions
  • Roles, services, and authentication: Level 3
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Life-cycle assurance: Level 3
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
MultiChipStand
Description
Palo Alto Networks offers a full line of next-generation security appliances. Our platform architecture is based on our single-pass engine, PAN-OS, for networking, security, threat prevention, and management functionality that is consistent across all platforms. The devices differ only in capacities, performance, and physical configuration.
Approved Algorithms
AES-CBC
A3453
AES-CCM
A3453
AES-CFB128
A3453
AES-CTR
A3453
AES-GCM
A3453
Counter DRBG
A3453
ECDSA KeyGen (FIPS186-4)
A3453
ECDSA KeyVer (FIPS186-4)
A3453
ECDSA SigGen (FIPS186-4)
A3453
ECDSA SigVer (FIPS186-4)
A3453
HMAC-SHA-1
A3453
HMAC-SHA2-224
A3453
HMAC-SHA2-256
A3453
HMAC-SHA2-384
A3453
HMAC-SHA2-512
A3453
KAS-ECC-SSC Sp800-56Ar3
A3453
KAS-FFC-SSC Sp800-56Ar3
A3453
KDF IKEv2
A3453
KDF SNMP
A3453
KDF SSH
A3453
RSA KeyGen (FIPS186-4)
A3453
RSA SigGen (FIPS186-4)
A3453
RSA SigVer (FIPS186-4)
A3453
Safe Primes Key Generation
A3453
Safe Primes Key Verification
A3453
SHA-1
A3453
SHA2-224
A3453
SHA2-256
A3453
SHA2-384
A3453
SHA2-512
A3453
TLS v1.2 KDF RFC7627
A3453

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Jake Bajic
[email protected]
Phone: 408-753-4000
 Amir Shahhosseini
[email protected]
Phone: 408-753-4000

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
6/10/2026 Initial Leidos Accredited Testing & Evaluation (AT&E) Lab