Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5393

Details

Module Name
Palo Alto Networks SD-WAN Instant-On Network (ION) Devices ION 1200, ION 1200-S, ION 3200, ION 5200, and ION 9200
Standard
FIPS 140-3
Status
Active
Sunset Date
7/10/2029
Overall Level
2
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and opacity shield installed as indicated in the Security Policy.
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
MultiChipStand
Description
The Palo Alto Networks SD-WAN Instant-On Network (ION) Devices (ION 1200, ION 1200-S, ION 3200, ION 5200 and ION 9200) enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of your WAN.
Approved Algorithms
AES-CBC
A3563
AES-CBC
A3564
AES-CBC
A3565
AES-CFB128
A3563
AES-CTR
A3563
AES-ECB
A3563
AES-GCM
A3563
AES-GCM
A3564
Counter DRBG
A3563
ECDSA KeyGen (FIPS186-4)
A3563
ECDSA SigGen (FIPS186-4)
A3563
ECDSA SigVer (FIPS186-4)
A3563
HMAC DRBG
A3564
HMAC-SHA-1
A3563
HMAC-SHA2-256
A3563
HMAC-SHA2-256
A3564
HMAC-SHA2-256
A3565
HMAC-SHA2-384
A3563
HMAC-SHA2-384
A3564
HMAC-SHA2-384
A3565
HMAC-SHA2-512
A3563
HMAC-SHA2-512
A3564
HMAC-SHA2-512
A3565
KAS-ECC-SSC Sp800-56Ar3
A3563
KAS-ECC-SSC Sp800-56Ar3
A3564
KDF IKEv2
A3563
KDF SNMP
A3563
KDF SSH
A3563
KDF TLS
A3563
KDF TLS
A3564
RSA KeyGen (FIPS186-4)
A3563
RSA SigGen (FIPS186-4)
A3563
RSA SigVer (FIPS186-4)
A3563
RSA SigVer (FIPS186-4)
A3564
RSA SigVer (FIPS186-4)
C170
SHA-1
A3563
SHA-1
C170
SHA2-256
A3563
SHA2-256
A3564
SHA2-256
A3565
SHA2-256
C170
SHA2-384
A3563
SHA2-384
A3564
SHA2-384
A3565
SHA2-512
A3563
SHA2-512
A3564
SHA2-512
A3565

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
[email protected]
Phone: 408-753-4000
 Jake Bajic
[email protected]
Phone: 408-753-4000

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
7/10/2026 Initial Gossamer Security Solutions