This page was not yet optimized for use on mobile devices.

Panorama 11.1/11.2 running on M-200, M-300, M-600 and M-700

Certificate #5352

Webpage information

Status	active
Validation dates	25.06.2026
Sunset date	24-06-2031
Standard	FIPS 140-3
Security level	2
Type	Hardware
Embodiment	MultiChipStand
Caveat	When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy
Exceptions	Roles, services, and authentication: Level 3 Operational environment: N/A Non-invasive security: N/A Life-cycle assurance: Level 3 Mitigation of other attacks: N/A
Description	The Panorama M-200, M-300, M-600 and M-700 from Palo Alto Networks Inc., hereafter referred to as "Panorama M-Series", "Panorama HW", "modules", or the "cryptographic modules" are multi-chip standalone cryptographic modules designed to fulfill FIPS 140-3 level 2 requirements. Panorama M-Series management appliances provide centralized management and visibility of Palo Alto Networks next generation firewalls. From a central location, you can gain insight into applications, users, and content traversing the firewalls. The knowledge of what is on the network, in conjunction with safe application enablement policies, maximizes protection and control while minimizing administrative effort. Your security team can centrally perform analysis, reporting, and forensics with the aggregated data over time, or on data stored on the local firewall.
Vendor	Palo Alto Networks, Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms

AES-256, AES-128, AES-192, AES, AES-, CAST, HMAC, HMAC-SHA-256, CBC-MAC

Asymmetric Algorithms

RSA 2048, RSA 3072, RSA 4096, ECDH, ECDHE, ECDSA, ECC, DH, DHE

Hash functions

SHA-1, SHA-256

Schemes

MAC, Key Agreement

Protocols

SSH, SSHv2, TLS v1.2, TLSv1.2, TLS, TLS 1.2, TLSv1.3, IKEv2, VPN

Randomness

DRBG, RBG

Elliptic Curves

P-256, P-384, P-521

Block cipher modes

ECB, CBC, CTR, CFB, GCM, CCM

TLS cipher suites

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Trusted Execution Environments

PSP, SSC

Security level

level 2, Level 1, Level 2

Certification process

out of scope, in Section 11 will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 11.2 Administrator Guidance The Administrator Guidance can be obtained from

Standards

FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 186-2, FIPS 186-5, FIPS186, SP 800-38A, SP 800-38D, SP 800-90A, SP 800-56A, SP 800-135, SP 800-90B, PKCS 1, RFC7627, RFC 5288, RFC 5246, RFC762

File metadata

Creation date	D:20260624083911-04'00'
Modification date	D:20260624083911-04'00'
Pages	80
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

20.07.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf.
30.06.2026

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5352,
  "dgst": "044c06ac12dc9063",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "11.2",
        "11.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 15
          },
          "ECDH": {
            "ECDH": 6,
            "ECDHE": 2
          },
          "ECDSA": {
            "ECDSA": 74
          }
        },
        "FF": {
          "DH": {
            "DH": 2,
            "DHE": 2
          }
        },
        "RSA": {
          "RSA 2048": 11,
          "RSA 3072": 1,
          "RSA 4096": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "in Section 11 will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 11.2 Administrator Guidance The Administrator Guidance can be obtained from": 1,
          "out of scope": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CCM": {
          "CCM": 2
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 2
        },
        "GCM": {
          "GCM": 19
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKEv2": 3
        },
        "SSH": {
          "SSH": 103,
          "SSHv2": 57
        },
        "TLS": {
          "TLS": {
            "TLS": 89,
            "TLS 1.2": 3,
            "TLS v1.2": 8,
            "TLSv1.2": 73,
            "TLSv1.3": 1
          }
        },
        "VPN": {
          "VPN": 8
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 4
        },
        "MAC": {
          "MAC": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 18,
          "P-384": 24,
          "P-521": 20
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#11": 2,
          "#12": 2,
          "#13": 2,
          "#14": 2,
          "#15": 2,
          "#18": 2,
          "#19": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (128": 1,
          "AES 128/192/256": 1,
          "AES 256": 2,
          "AES-128": 1,
          "AES-192": 1,
          "AES-256": 3,
          "DRBG 2": 1,
          "HMAC- SHA-1": 2,
          "HMAC- SHA-256": 1,
          "HMAC-SHA-1": 4,
          "HMAC-SHA-256": 6,
          "PKCS 1": 4,
          "RSA 2048": 11,
          "RSA 3072": 1,
          "RSA 4096": 1,
          "SHA- 256": 1,
          "SHA-1": 9,
          "SHA-256": 11,
          "SHA2- 224": 1,
          "SHA2- 256": 2,
          "SHA2- 384": 2,
          "SHA2- 512": 2,
          "SHA2-224": 3,
          "SHA2-256": 10,
          "SHA2-384": 5,
          "SHA2-512": 6
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 1,
          "level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 9
          },
          "SHA2": {
            "SHA-256": 11
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 59
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 7,
          "FIPS 180-4": 5,
          "FIPS 186-2": 1,
          "FIPS 186-4": 9,
          "FIPS 186-5": 1,
          "FIPS 198-1": 5,
          "FIPS186": 4,
          "FIPS186-4": 27
        },
        "NIST": {
          "SP 800-135": 3,
          "SP 800-38A": 3,
          "SP 800-38D": 1,
          "SP 800-56A": 6,
          "SP 800-90A": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS 1": 2
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5288": 1,
          "RFC762": 4,
          "RFC7627": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 41,
            "AES-": 17,
            "AES-128": 1,
            "AES-192": 1,
            "AES-256": 3
          },
          "CAST": {
            "CAST": 52
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 3,
            "HMAC": 41,
            "HMAC-SHA-256": 3
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 13
        },
        "IBM": {
          "SSC": 5
        }
      },
      "tls_cipher_suite": {
        "TLS": {
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20260624083911-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260624083911-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 1391056,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://docs.paloaltonetworks.com/panorama/11-1/panorama-admin",
          "https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/advanced-url-filtering/advanced-url-filtering-administration.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 80
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "2927af5c0889c25aed0914bbf628d8c1d6413171f405bc8b9c1963c45f1f7c1a",
      "txt_hash": "9d2dd25b96ec2d654f801cf9aa0d50427ba1972a3c00cf76c2264376d1b737c0"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
    "date_sunset": "2031-06-24",
    "description": "The Panorama M-200, M-300, M-600 and M-700 from Palo Alto Networks Inc., hereafter referred to as \"Panorama M-Series\", \"Panorama HW\", \"modules\", or the \"cryptographic modules\" are multi-chip standalone cryptographic modules designed to fulfill FIPS 140-3 level 2 requirements. Panorama M-Series management appliances provide centralized management and visibility of Palo Alto Networks next generation firewalls. From a central location, you can gain insight into applications, users, and content traversing the firewalls. The knowledge of what is on the network, in conjunction with safe application enablement policies, maximizes protection and control while minimizing administrative effort. Your security team can centrally perform analysis, reporting, and forensics with the aggregated data over time, or on data stored on the local firewall.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Roles, services, and authentication: Level 3",
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 3",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "Panorama 11.1/11.2 running on M-200, M-300, M-600 and M-700",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-06-25",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Palo Alto Networks, Inc.",
    "vendor_url": "http://www.paloaltonetworks.com"
  }
}

Sections

Panorama 11.1/11.2 running on M-200, M-300, M-600 and M-700

Certificate #5352

Webpage information

Security policy

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Trusted Execution Environments

Security level

Certification process

Standards

File metadata

Heuristics

References

Updates Feed

Certificate changed

New certificate

Raw data

Sections

Panorama 11.1/11.2 running on M-200, M-300, M-600 and M-700

Certificate #5352

Webpage information

Security policy

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Device

Trusted Execution Environments

Security

Security level

Certification process

Other

Standards

File metadata

Heuristics

References

Updates Feed

Raw data

Toggle raw data