Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5500

Details

Module Name
Palo Alto Networks SD-WAN Virtual Instant-On Network (vION)
Standard
FIPS 140-3
Status
Active
Sunset Date
8/23/2031
Overall Level
1
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
The Palo Alto Networks SD-WAN Virtual Instant-On Network (vION) enables the integration of a diverse set of wide area network (WAN) connection types, improves application performance and visibility, enhances security and compliance, and reduces the overall cost and complexity of a WAN. Built with the intent to reduce remote infrastructure, Palo Alto Networks SD-WAN vION enables the cloud-delivered branch.
Approved Algorithms
AES-CBC
A6238
AES-CBC
A6239
AES-CBC
A6240
AES-CFB128
A6238
AES-CTR
A6238
AES-GCM
A6238
AES-GCM
A6239
Counter DRBG
A6238
Counter DRBG
A6239
ECDSA KeyGen (FIPS186-5)
A6238
ECDSA SigGen (FIPS186-5)
A6238
ECDSA SigVer (FIPS186-5)
A6238
HMAC-SHA-1
A6238
HMAC-SHA2-256
A6238
HMAC-SHA2-256
A6239
HMAC-SHA2-256
A6240
HMAC-SHA2-384
A6238
HMAC-SHA2-384
A6239
HMAC-SHA2-384
A6240
HMAC-SHA2-512
A6238
HMAC-SHA2-512
A6240
KAS-ECC-SSC Sp800-56Ar3
A6238
KAS-ECC-SSC Sp800-56Ar3
A6239
KDF IKEv2
A6238
KDF SNMP
A6238
KDF SSH
A6238
RSA KeyGen (FIPS186-5)
A6238
RSA SigGen (FIPS186-5)
A6238
RSA SigVer (FIPS186-5)
A6238
RSA SigVer (FIPS186-5)
A6239
SHA-1
A6238
SHA2-256
A6238
SHA2-256
A6239
SHA2-256
A6240
SHA2-384
A6238
SHA2-384
A6239
SHA2-384
A6240
SHA2-512
A6238
SHA2-512
A6240
TLS v1.2 KDF RFC7627
A6238
TLS v1.2 KDF RFC7627
A6239

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
[email protected]
Phone: 408-753-4000
 Jake Bajic
[email protected]
Phone: 408-753-4000

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
8/24/2026 Initial Gossamer Security Solutions