This page was not yet optimized for use on mobile devices.

WildFire 11.1/11.2 WF-500 and WF-500-B

Certificate #5354

Webpage information

Status	active
Validation dates	25.06.2026
Sunset date	24-06-2031
Standard	FIPS 140-3
Security level	2
Type	Hardware
Embodiment	MultiChipStand
Caveat	When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy
Exceptions	Roles, services, and authentication: Level 3 Operational environment: N/A Non-invasive security: N/A Life-cycle assurance: Level 3 Mitigation of other attacks: N/A
Description	The Palo Alto Networks, Inc. WildFire 11.1.3/11.2.5 WF-500 and WF-500-B module identifies unknown malware, zero-day exploits, and Advanced Persistent Threats (APTs) through dynamic analysis, and automatically disseminates protection in near real-time to help security teams meet the challenge of advanced cyber-attacks.
Vendor	Palo Alto Networks Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms

AES-256, AES-128, AES-192, AES, AES-, CAST, HMAC, HMAC-SHA-256, CBC-MAC

Asymmetric Algorithms

RSA 2048, RSA 3072, RSA 4096, ECDHE, ECDH, ECDSA, ECC, Diffie-Hellman, DHE, DH

Hash functions

SHA-1, SHA-256

Schemes

MAC, Key Agreement

Protocols

SSH, SSHv2, TLS v1.2, TLSv1.2, TLS, TLS 1.2, TLSv1.3, IKEv2, IPsec, VPN

Randomness

DRBG, RBG

Elliptic Curves

P-256, P-384, P-521

Block cipher modes

CBC, CTR, CFB, GCM, CCM

TLS cipher suites

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

Trusted Execution Environments

PSP

Security level

level 2, Level 2, Level 1

Standards

FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 186-2, FIPS 186-5, SP 800-38A, SP 800-38C, SP 800-38D, SP 800-90A, SP 800-56A, SP 800-135, SP 800-90B, PKCS 1, RFC7627, RFC 5288, RFC 5246, RFC 5282

File metadata

Creation date	D:20260624133420-04'00'
Modification date	D:20260624133420-04'00'
Pages	69
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

20.07.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf.
30.06.2026

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5354,
  "dgst": "2a649680041ffb7e",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "11.2",
        "11.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 4
          },
          "ECDH": {
            "ECDH": 12,
            "ECDHE": 4
          },
          "ECDSA": {
            "ECDSA": 120
          }
        },
        "FF": {
          "DH": {
            "DH": 4,
            "DHE": 4,
            "Diffie-Hellman": 4
          }
        },
        "RSA": {
          "RSA 2048": 8,
          "RSA 3072": 1,
          "RSA 4096": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 3
        },
        "GCM": {
          "GCM": 18
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKEv2": 16
        },
        "IPsec": {
          "IPsec": 1
        },
        "SSH": {
          "SSH": 168,
          "SSHv2": 56
        },
        "TLS": {
          "TLS": {
            "TLS": 107,
            "TLS 1.2": 3,
            "TLS v1.2": 3,
            "TLSv1.2": 70,
            "TLSv1.3": 1
          }
        },
        "VPN": {
          "VPN": 4
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 7
        },
        "MAC": {
          "MAC": 4
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 34,
          "P-384": 34,
          "P-521": 28
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#10": 1,
          "#11": 2,
          "#12": 2,
          "#13": 1,
          "#18": 1,
          "#19": 1,
          "#6": 1,
          "#7": 1,
          "#8": 1,
          "#9": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (128": 1,
          "AES 128/192/256": 1,
          "AES 256": 2,
          "AES GCM Decrypt 256": 1,
          "AES GCM Encrypt 256": 1,
          "AES-128": 1,
          "AES-192": 1,
          "AES-256": 2,
          "AES-GCM 96": 1,
          "DRBG 2": 1,
          "HMAC- SHA-1 160": 1,
          "HMAC-SHA- 256": 2,
          "HMAC-SHA-1": 6,
          "HMAC-SHA-256": 4,
          "PKCS 1": 4,
          "RSA 2048": 8,
          "RSA 3072": 1,
          "RSA 4096": 1,
          "SHA- 256": 3,
          "SHA-1": 6,
          "SHA-1 160": 2,
          "SHA-256": 8,
          "SHA2- 224": 1,
          "SHA2- 256": 2,
          "SHA2- 384": 3,
          "SHA2- 512": 1,
          "SHA2- 512 512": 2,
          "SHA2-224": 3,
          "SHA2-256": 9,
          "SHA2-384": 5,
          "SHA2-512": 6
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 2,
          "level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          },
          "SHA2": {
            "SHA-256": 8
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 59
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 8,
          "FIPS 180-4": 5,
          "FIPS 186-2": 1,
          "FIPS 186-4": 9,
          "FIPS 186-5": 1,
          "FIPS 198-1": 5,
          "FIPS186-4": 33
        },
        "NIST": {
          "SP 800-135": 4,
          "SP 800-38A": 5,
          "SP 800-38C": 1,
          "SP 800-38D": 1,
          "SP 800-56A": 6,
          "SP 800-90A": 1,
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS 1": 2
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5282": 1,
          "RFC 5288": 2,
          "RFC7627": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 40,
            "AES-": 4,
            "AES-128": 1,
            "AES-192": 1,
            "AES-256": 2
          },
          "CAST": {
            "CAST": 52
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 2,
            "HMAC": 35,
            "HMAC-SHA-256": 2
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 10
        }
      },
      "tls_cipher_suite": {
        "TLS": {
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20260624133420-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260624133420-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 2396831,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/advanced-wildfire/wildfire-appliance.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 69
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "c44e8325af29fc681e2cae2c5c2746d7ffe59c76b4c4b55bb7a5e0b3cfc1f417",
      "txt_hash": "d37c922d01727b38dda349f4d439e7dc689b5ac12409350e3411931cf33eeb3e"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
    "date_sunset": "2031-06-24",
    "description": "The Palo Alto Networks, Inc. WildFire 11.1.3/11.2.5 WF-500 and WF-500-B module identifies unknown malware, zero-day exploits, and Advanced Persistent Threats (APTs) through dynamic analysis, and automatically disseminates protection in near real-time to help security teams meet the challenge of advanced cyber-attacks.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Roles, services, and authentication: Level 3",
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 3",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "WildFire 11.1/11.2 WF-500 and WF-500-B",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-06-25",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Palo Alto Networks Inc.",
    "vendor_url": "http://www.paloaltonetworks.com"
  }
}

Sections

WildFire 11.1/11.2 WF-500 and WF-500-B

Certificate #5354

Webpage information

Security policy

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Trusted Execution Environments

Security level

Standards

File metadata

Heuristics

References

Updates Feed

Certificate changed

New certificate

Raw data

Sections

WildFire 11.1/11.2 WF-500 and WF-500-B

Certificate #5354

Webpage information

Security policy

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Elliptic Curves

Block cipher modes

TLS cipher suites

Device

Trusted Execution Environments

Security

Security level

Other

Standards

File metadata

Heuristics

References

Updates Feed

Raw data

Toggle raw data