{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "87269b28eaea324d", "cert_id": 5480, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Palo Alto Networks SD-WAN Instant-On Network (ION) Devices ION 1200, ION 1200-S, ION 3200, ION 3200H, ION 5200, and ION 9200", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-08-12", "validation_type": "Initial", "lab": "Gossamer Security Solutions"}], "vendor_url": "http://www.paloaltonetworks.com", "vendor": "Palo Alto Networks, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident seals and opacity shield installed as indicated in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The Palo Alto Networks SD-WAN Instant-On Network (ION) Devices (ION 1200, ION 1200-S, ION 3200, ION 3200H, ION 5200, and ION 9200) enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of your WAN.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-08-11", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#1": 1}}, "fips_security_level": {"Level": {"Level 1": 1, "Level 2": 2}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 6, "HMAC- SHA-1": 1, "SHA2-256": 20, "SHA2-384": 11, "SHA2-512": 10, "SHA-1": 9, "SHA2-224": 1, "SHA2": 1, "SHA2- 256": 4, "RSA 2048": 3, "AES-128": 2, "AES-192": 2, "AES-256": 9, "DRBG 256": 2, "# A6185": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-128": 2, "AES-192": 2, "AES-256": 9, "AES": 14, "AES-": 8}, "CAST": {"CAST": 85}}, "constructions": {"MAC": {"HMAC": 12, "CBC-MAC": 2}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 3}, "ECC": {"ECDH": {"ECDH": 1, "ECDHE": 69}, "ECDSA": {"ECDSA": 37}, "ECC": {"ECC": 3}}, "FF": {"DH": {"Diffie-Hellman": 1}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 9}, "SHA2": {"SHA2": 1}}}, "crypto_scheme": {"MAC": {"MAC": 16}, "KA": {"Key Agreement": 3}}, "crypto_protocol": {"SSH": {"SSH": 78, "SSHv2": 36}, "TLS": {"TLS": {"TLS v1.2": 12, "TLSv1.2": 64, "TLS": 84}}, "IKE": {"IKEv2": 5, "IKE": 1}}, "randomness": {"PRNG": {"DRBG": 145}, "RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 1}, "GCM": {"GCM": 10}}, "ecc_curve": {"NIST": {"P-256": 40, "P-384": 10, "P-521": 10, "P-224": 4}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 10}, "IBM": {"SSC": 4}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 9, "FIPS186-5": 32, "FIPS 186-5": 8, "FIPS 198-1": 9, "FIPS 180-4": 9}, "NIST": {"SP 800-38A": 5, "SP 800-38D": 2, "SP 800-90A": 2, "SP 800-56A": 2, "SP 800-135": 5, "SP 800-90B": 1}, "RFC": {"RFC7627": 6, "RFC 5288": 1, "RFC 7296": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "of the TELs as depicted below and any additional requirement per the site security policy which are out of scope of this Security Policy. 7.2 User Placed Tamper Seals ION 1200/1200-S Page 40 of 66 \u00a9 2026 Palo": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 2469356, "pdf_is_encrypted": false, "pdf_number_of_pages": 66, "/Author": "JustinBettencourt", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "1c3e6aab,4592bba7,5f2f5d11", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED//OFFICIAL USE ONLY / NON CLASSIFI\u00c9//R\u00c9SERV\u00c9 \u00c0 DES FINS OFFICIELLES", "/Comments": "", "/Company": "", "/CreationDate": "D:20260811143110-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_ActionId": "581ec03f-fdc8-4d60-a394-50c83ec786c5", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_ContentBits": "1", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_Enabled": "true", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_Method": "Privileged", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_Name": "UNCLASSIFIED OFFICIAL USE ONLY", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_SetDate": "2026-08-11T18:24:13Z", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_b1479b79-36a9-4723-8bf6-a8305c972c78_Tag": "10, 0, 1, 1", "/ModDate": "D:20260811143453-04'00'", "/Producer": "Adobe PDF Library 26.1.187", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.paloaltonetworks.com/", "https://docs.paloaltonetworks.com/", "about:blank"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["RSA SigVer (FIPS186-5)A6186", "AES-CFB128A6185", "ECDSA SigGen (FIPS186-5)A6185", "AES-GCMA6186", "KDF SNMPA6185", "HMAC-SHA-1A6185", "AES-CBCA6188", "SHA2-384A6188", "ECDSA SigVer (FIPS186-5)A6185", "ECDSA KeyGen (FIPS186-5)A6185", "KDF SSHA6185", "SHA-1A6185", "TLS v1.2 KDF RFC7627A6186", "HMAC-SHA2-256A6188", "HMAC-SHA2-512A6188", "KAS-ECC-SSC Sp800-56Ar3A6186", "HMAC-SHA2-384A6188", "AES-CTRA6185", "Counter DRBGA6186", "SHA2-256A6188", "RSA KeyGen (FIPS186-5)A6185", "RSA SigGen (FIPS186-5)A6185", "SHA2-512A6188", "KDF IKEv2A6185"]}, "extracted_versions": {"_type": "Set", "elements": ["1200", "3200", "5200", "9200"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "3f3ca90af5fd9ff3117a9dd451929e90caf7294e97c0ec0386e1f4dc1248b6d3", "txt_hash": "9a551e7a5b03c71b04bdcd51929893229b9a4aa60160cebbad4e5d6cc81165d0", "json_hash": null}}}