{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "e1cbed0ecbee7325", "cert_id": 5368, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Panorama Virtual Appliance 10.2", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-07-06", "validation_type": "Initial", "lab": "Leidos Accredited Testing & Evaluation (AT&E) Lab"}], "vendor_url": "http://www.paloaltonetworks.com", "vendor": "Palo Alto Networks, Inc", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs", "exceptions": ["Roles, services, and authentication: Level 3", "Physical security: N/A", "Non-invasive security: N/A", "Life-cycle assurance: Level 3", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Panorama offers easy-to-implement, centralized management features that provide insight into network-wide traffic and simplify configurations.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2029-08-28", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"level 1": 1, "Level 1": 4}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 4, "HMAC- SHA-1": 2, "SHA2-224": 3, "SHA2-256": 13, "SHA2-384": 5, "SHA2-512": 5, "SHA-1": 6, "SHA2- 512": 3, "SHA2- 256": 4, "SHA2- 224": 1, "SHA2- 384": 2, "SHA-256": 4, "RSA 2048": 10, "RSA 3072": 1, "RSA 4096": 1, "- PKCS 1": 1, "AES-256": 3, "AES-128": 1, "AES-192": 1, "AES 256": 2, "AES 128/192/256": 1, "AES (128": 1, "PKCS 1": 1}}, "vendor": {"Microsoft": {"Microsoft": 2}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 3, "AES-128": 1, "AES-192": 1, "AES": 60, "AES-": 32}, "CAST": {"CAST": 44}}, "constructions": {"MAC": {"HMAC": 69, "CBC-MAC": 1}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 10, "RSA 3072": 1, "RSA 4096": 1}, "ECC": {"ECDH": {"ECDH": 9, "ECDHE": 2}, "ECDSA": {"ECDSA": 163}, "ECC": {"ECC": 16}}, "FF": {"DH": {"DH": 3, "DHE": 2}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 6}, "SHA2": {"SHA-256": 4}}}, "crypto_scheme": {"MAC": {"MAC": 8}, "KA": {"Key Agreement": 4}}, "crypto_protocol": {"SSH": {"SSH": 317, "SSHv2": 101}, "TLS": {"TLS": {"TLS": 197, "TLSv1.2": 147, "TLS 1.2": 3}}}, "randomness": {"PRNG": {"DRBG": 84}, "RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 2}, "CTR": {"CTR": 3}, "CFB": {"CFB": 1}, "GCM": {"GCM": 39}}, "ecc_curve": {"NIST": {"P-256": 24, "P-384": 26, "P-521": 22}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 13}, "IBM": {"SSC": 15}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 10, "FIPS186-4": 30, "FIPS 186-4": 9, "FIPS 198-1": 5, "FIPS 180-4": 5, "FIPS 186-2": 1, "FIPS 186-5": 1, "FIPS18": 4, "FIPS186": 4}, "NIST": {"SP 800-38A": 3, "SP 800-38D": 1, "SP 800-90A": 1, "SP 800-56A": 6, "SP 800-135": 3, "SP 800-90B": 1}, "PKCS": {"PKCS 1": 1}, "RFC": {"RFC 5288": 1, "RFC 5246": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 2, "the module. Any software loaded into this module that is not shown on the module certificate is out of scope of this validation and requires a separate FIPS 140-3 validation. 5.2 Initiate on Demand Page 64": 1, "in Section 11 will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 11.2 Administrator Guidance The Administrator Guidance can be obtained from": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 949095, "pdf_is_encrypted": false, "pdf_number_of_pages": 91, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260706102130-04'00'", "/ModDate": "D:20260706102130-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["RSA KeyGen (FIPS186-4)A2907", "Counter DRBGA2907", "KAS-FFC-SSC Sp800-56Ar3A2907", "HMAC-SHA-1A2907", "KAS-ECC-SSC Sp800-56Ar3A2907", "AES-GCMA2907", "RSA SigVer (FIPS186-4)A2907", "KDF TLSA2907", "ECDSA KeyVer (FIPS186-4)A2907", "ECDSA SigGen (FIPS186-4)A2907", "HMAC-SHA2-512A2907", "HMAC-SHA2-256A2907", "AES-CFB128A2907", "ECDSA SigVer (FIPS186-4)A2907", "SHA-1A2907", "KDF SNMPA2907", "SHA2-256A2907", "RSA SigGen (FIPS186-4)A2907", "ECDSA KeyGen (FIPS186-4)A2907", "KDF SSHA2907", "AES-CTRA2907", "AES-CBCA2907", "Safe Primes Key VerificationA2907", "Safe Primes Key GenerationA2907", "SHA2-224A2907", "SHA2-384A2907", "HMAC-SHA2-384A2907", "HMAC-SHA2-224A2907", "SHA2-512A2907"]}, "extracted_versions": {"_type": "Set", "elements": ["10.2"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "95b27cd0f49794ea3211261db89ce060228c8f0d0d0507a672a386515f1d2a9c", "txt_hash": "bc568daa5f95bec0efe7a1a3b1909bb0acfb5a2d3f4615244b011cc4c7311d33", "json_hash": null}}}