Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5328

Details

Module Name
Palo Alto Networks SD-WAN ION Core Crypto Module
Standard
FIPS 140-3
Status
Active
Sunset Date
6/10/2031
Overall Level
1
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
The Palo Alto Networks SD-WAN ION Core Crypto Module is utilized in hardware and software ION form factors. These enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of a WAN.
Approved Algorithms
AES-CBC
AES-CBC
AES-CBC
AES-CBC
AES-CFB128
AES-CTR
AES-GCM
AES-GCM
Counter DRBG
Counter DRBG
ECDSA KeyGen (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigVer (FIPS186-5)
HMAC-SHA-1
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512
HMAC-SHA2-512
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KDF IKEv2
KDF SNMP
KDF SSH
RSA KeyGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA SigVer (FIPS186-5)
RSA SigVer (FIPS186-5)
SHA-1
SHA2-256
SHA2-256
SHA2-256
SHA2-256
SHA2-384
SHA2-384
SHA2-384
SHA2-384
SHA2-512
SHA2-512
SHA2-512
TLS v1.2 KDF RFC7627
TLS v1.2 KDF RFC7627

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
[email protected]
Phone: 408-753-4000
Jake Bajic
[email protected]
Phone: 408-753-4000

Validation History

Date Type Lab
6/11/2026 Initial Gossamer Security Solutions