{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "6320064497fdca4c", "cert_id": 5484, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "GlobalProtect App", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-08-14", "validation_type": "Initial", "lab": "Leidos Accredited Testing & Evaluation (AT&E) Lab"}], "vendor_url": "http://www.paloaltonetworks.com", "vendor": "Palo Alto Networks", "certificate_pdf_url": null, "module_type": "Software-Hybrid", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs", "exceptions": ["Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "GlobalProtect App from Palo Alto Networks, enables organizations to protect the mobile workforce by extending the Next-Generation Security Platform to all users, regardless of location. It secures traffic by applying the platform's capabilities to understand application use, associate the traffic with users and devices, and enforce security policies with next-generation technologies.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2029-10-10", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#2": 2, "#1": 1}}, "fips_security_level": {"Level": {"Level 1": 4, "level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 4, "HMAC- SHA-1, 160": 1, "HMAC- SHA-1 160": 1, "SHA2-224": 2, "SHA2-256": 12, "SHA2- 384": 3, "SHA2-512": 4, "SHA-1": 4, "SHA2-384": 8, "SHA2- 256": 4, "SHA-1, 160": 1, "SHA-1 160": 2, "SHA2- 512 512": 1, "RSA 2048": 6, "RSA 3072": 4, "PKCS 1": 4, "AES-128": 1, "AES-192": 1, "AES-256": 2, "AES (128": 1, "AES GCM Decrypt 256": 1, "AES GCM Encrypt 256": 1}}, "vendor": {"Samsung": {"Samsung": 1}, "Qualcomm": {"Qualcomm": 3}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 1, "AES-192": 1, "AES-256": 2, "AES": 26, "AES-": 12}, "CAST": {"CAST": 36}}, "constructions": {"MAC": {"HMAC": 16, "CBC-MAC": 1}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 6, "RSA 3072": 4}, "ECC": {"ECDH": {"ECDHE": 10}, "ECDSA": {"ECDSA": 41}, "ECC": {"ECC": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 7}}}, "crypto_scheme": {"MAC": {"MAC": 5}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {"TLS": {"TLS": {"TLS": 59, "TLSv1.2": 59, "TLS v1.2": 1, "TLS 1.2": 2}}, "IKE": {"IKEv2": 1}, "IPsec": {"IPsec": 9}, "VPN": {"VPN": 6}}, "randomness": {"PRNG": {"DRBG": 33}, "RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 3}, "GCM": {"GCM": 28}}, "ecc_curve": {"NIST": {"P-256": 14, "P-384": 12, "P-521": 12}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 5}, "IBM": {"SSC": 2}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 8, "FIPS186-4": 15, "FIPS 186-4": 7, "FIPS 198-1": 3, "FIPS 180-4": 4, "FIPS 186-2": 1, "FIPS18": 2}, "NIST": {"SP 800-38A": 1, "SP 800-38D": 1, "SP 800-90A": 1, "SP 800-56A": 3, "SP 800-135": 1, "SP 800-38F": 1, "SP 800-90B": 1}, "PKCS": {"PKCS 1": 2}, "RFC": {"RFC 5288": 1, "RFC 5246": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {"com": {"com.paloaltonetworks.gp.pangps.plist": 1}}, "certification_process": {"OutOfScope": {"out of scope": 1, "directions below will result in the module operating in a non-compliant state, which is considered out of scope of this validation. Linux \u2013 Ubuntu: To prepare this environment for GlobalProtect initialization": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 583091, "pdf_is_encrypted": false, "pdf_number_of_pages": 38, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260814102112-04'00'", "/ModDate": "D:20260814102112-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://docs.paloaltonetworks.com/globalprotect"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["Counter DRBGA2999", "RSA SigVer (FIPS186-4)A2999", "SHA2-384A2999", "SHA-1A2999", "HMAC-SHA2-256A2999", "RSA SigGen (FIPS186-4)A2999", "HMAC-SHA2-384A2999", "SHA2-512A2999", "KDF TLSA2999", "SHA2-256A2999", "ECDSA SigGen (FIPS186-4)A2999", "AES-GCMA2999", "ECDSA SigVer (FIPS186-4)A2999", "ECDSA KeyGen (FIPS186-4)A2999", "KAS-ECC-SSC Sp800-56Ar3A2999", "HMAC-SHA-1A2999", "AES-CBCA2999", "ECDSA KeyVer (FIPS186-4)A2999"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "00ed7d4cf3a8ffc1c77f6a8e1828646eacf786eae618fc02f92cbbe54152b5de", "txt_hash": "5bfeb4b970426c7e26320923a6cbcb938fdc26dd50d4b50320ec0b669b4cca2c", "json_hash": null}}}