This page was not yet optimized for use on mobile devices.

Palo Alto Networks SD-WAN Virtual Instant-On Network (vION)

Certificate #4768

Webpage information ?

Status	active
Validation dates	19.08.2024
Sunset date	18-08-2026
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	Interim Validation. When installed, initialized and configured as specified in section "Secure Operation" of the Security Policy and operated in approved mode
Exceptions	Physical security: N/A Non-invasive security: N/A Mitigation of other attacks: N/A Documentation requirements: N/A Cryptographic module security policy: N/A
Description	The Palo Alto Networks SD-WAN Virtual Instant-On Network (vION) enables the integration of a diverse set of wide area network (WAN) connection types, improves application performance and visibility, enhances security and compliance, and reduces the overall cost and complexity of your WAN.
Tested configurations	KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 with PAA KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 without PAA
Vendor	Palo Alto Networks, Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES-256, AES, CAST, HMAC

Asymmetric Algorithms

RSA 2048, ECDHE, ECDSA, ECC, Diffie-Hellman

Hash functions

SHA-1

Schemes

MAC, Key Agreement

Protocols

SSH, TLS, TLSv1.2, TLS 1.2, IKEv2, IKE

Randomness

DRBG

Elliptic Curves

P-256, P-384, P-521, P-224

Block cipher modes

ECB, CBC, CTR, GCM

Trusted Execution Environments

PSP

Security level

Level 1, level 1

Standards

FIPS 140-3, FIPS 197, FIPS140-3, FIPS 186-4, FIPS 198-1, FIPS 180-4, SP 800-38D, SP 800-38A, SP 800-140B, SP 800-90B, PKCS#1, RFC 5288, ISO/IEC 24759

File metadata

Author	Richard Wang
Creation date	D:20240611160509-04'00'
Modification date	D:20240611160509-04'00'
Pages	19
Creator	Microsoft® Word 2016
Producer	Microsoft® Word 2016

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

09.09.2024 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4768,
  "dgst": "1900b07bf0e92e67",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA SigVer (FIPS186-4)A3563",
        "HMAC DRBGA3564",
        "AES-CBCA3566",
        "SHA2-224A3564",
        "Counter DRBGA3563",
        "KDF SNMPA3563",
        "HMAC-SHA2-512A3564",
        "AES-ECBA3563",
        "HMAC-SHA2-224A3563",
        "SHA-1A3566",
        "KDF IKEv2A3563",
        "SHA2-512A3564",
        "HMAC-SHA-1A3563",
        "SHA2-384A3564",
        "ECDSA SigGen (FIPS186-4)A3563",
        "HMAC-SHA2-384A3564",
        "AES-GCMA3564",
        "ECDSA KeyGen (FIPS186-4)A3564",
        "RSA KeyGen (FIPS186-4)A3563",
        "KDF SSHA3563",
        "RSA SigVer (FIPS186-4)A3572",
        "HMAC-SHA2-256A3566",
        "RSA SigGen (FIPS186-4)A3563",
        "SHA2-256A3564",
        "AES-CTRA3563",
        "KDF TLSA3564",
        "KAS-ECC-SSC Sp800-56Ar3A3564"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 19
          },
          "ECDH": {
            "ECDHE": 41
          },
          "ECDSA": {
            "ECDSA": 40
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 9
          }
        },
        "RSA": {
          "RSA 2048": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 2,
          "IKEv2": 7
        },
        "SSH": {
          "SSH": 44
        },
        "TLS": {
          "TLS": {
            "TLS": 60,
            "TLS 1.2": 1,
            "TLSv1.2": 15
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "MAC": {
          "MAC": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 16,
          "P-256": 16,
          "P-384": 42,
          "P-521": 16
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES-256": 1,
          "AES-CBC 256": 4,
          "AES-GCM 256": 4,
          "HMAC-SHA-1": 22,
          "PAA 2": 1,
          "PKCS#1": 8,
          "RSA 2048": 2,
          "SHA-1": 3,
          "SHA2-224": 2,
          "SHA2-256": 16,
          "SHA2-384": 3,
          "SHA2-512": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 4,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 54
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 10,
          "FIPS 180-4": 9,
          "FIPS 186-4": 14,
          "FIPS 197": 6,
          "FIPS 198-1": 8,
          "FIPS140-3": 2
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-140B": 1,
          "SP 800-38A": 3,
          "SP 800-38D": 3,
          "SP 800-90B": 3
        },
        "PKCS": {
          "PKCS#1": 4
        },
        "RFC": {
          "RFC 5288": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 17,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 22
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 26
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Richard Wang",
      "/CreationDate": "D:20240611160509-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2016",
      "/ModDate": "D:20240611160509-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2016",
      "pdf_file_size_bytes": 897858,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "about:blank",
          "http://www.paloaltonetworks.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 19
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "e3cb1422fbb8905965ca24f40c7fe8b3b7e175f6b5fbdbae358ef2f855bc781c",
    "policy_txt_hash": "3ee3324515a9095fb5e55f87805ec204fa5757acde82cf81ca3e456cfa4858e5"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim Validation. When installed, initialized and configured as specified in section \"Secure Operation\" of the Security Policy and operated in approved mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2024_010924_0336.pdf",
    "date_sunset": "2026-08-18",
    "description": "The Palo Alto Networks SD-WAN Virtual Instant-On Network (vION) enables the integration of a diverse set of wide area network (WAN) connection types, improves application performance and visibility, enhances security and compliance, and reduces the overall cost and complexity of your WAN.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A",
      "Documentation requirements: N/A",
      "Cryptographic module security policy: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Palo Alto Networks SD-WAN Virtual Instant-On Network (vION)",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "6.1.2",
    "tested_conf": [
      "KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 with PAA",
      "KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-08-19",
        "lab": "GOSSAMER SECURITY SOLUTIONS INC",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Palo Alto Networks, Inc.",
    "vendor_url": "http://www.paloaltonetworks.com"
  }
}