U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Cryptographic Module Validation Program CMVP

Certificate #3888

Details

Module Name
PAN-OS 9.0 VM-Series
Standard
FIPS 140-2
Status
Active
Sunset Date
4/8/2026
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Palo Alto Networks VM-Series allows you to protect your applications and data from cyber threats with our next-generation firewall security, and advanced threat prevention features.
Tested Configuration(s)
  • KVM on CentOS 7.5 running on a Dell Power Edge R730 with Intel Xeon E5-2630 CPU
  • Microsoft Hyper-V 2012 r2 running on a Dell PowerEdge R730 with Intel Xeon E5-2640 CPU (single user mode)
  • VMware ESXi v6.5 running on a Dell PowerEdge R730 with Intel Xeon E5-2640 CPU
FIPS Algorithms
AES Cert. #C999
CKG vendor affirmed
CVL Cert. #C999
DRBG Cert. #C999
DSA Cert. #C999
ECDSA Cert. #C999
HMAC Cert. #C999
KAS KAS-SSC Cert. #A2669 and CVL Cert. #C999
KAS-SSC Cert. #A2669
KTS AES Cert. #C999 and HMAC Cert. #C999; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Cert. #C999; key establishment methodology provides 128 or 256 bits of encryption strength
RSA Cert. #C999
SHS Cert. #C999
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Software Versions
9.0.9-h1

Vendor

Palo Alto Networks, Inc.
3000 Tannery Way
Santa Clara, CA 95054
USA

Amir Shahhosseini
ashahhosse@paloaltonetworks.com
Phone: 408-753-4000
Jake Bajic
jbajic@paloaltonetworks.com
Phone: 408-753-4000

Validation History

Date Type Lab
4/9/2021 Initial UL VERIFICATION SERVICES INC
7/5/2022 Update LEIDOS CSTL