Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5392

Details

Module Name
Palo Alto Networks SD-WAN ION Core Crypto Module
Standard
FIPS 140-3
Status
Active
Sunset Date
7/7/2029
Overall Level
1
Caveat
When installed, initialized and configured as specified in section 11.1 of the Security Policy and operated in approved mode
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
The Palo Alto Networks SD-WAN ION Core Crypto Module is utilized in hardware and software ION form factors. These enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of your WAN.
Approved Algorithms
AES-CBC
AES-CBC
AES-CFB128
AES-CTR
AES-ECB
AES-GCM
AES-GCM
Counter DRBG
ECDSA KeyGen (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigVer (FIPS186-4)
HMAC DRBG
HMAC-SHA-1
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KDF IKEv2
KDF SNMP
KDF SSH
KDF TLS
KDF TLS
RSA KeyGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigVer (FIPS186-4)
RSA SigVer (FIPS186-4)
SHA-1
SHA2-256
SHA2-256
SHA2-384
SHA2-384
SHA2-512
SHA2-512

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
[email protected]
Phone: 408-753-4000
Jake Bajic
[email protected]
Phone: 408-753-4000

Validation History

Date Type Lab
7/10/2026 Initial Gossamer Security Solutions