808bits

Palo Alto Networks VM-Series

FIPS 140-2 certificate #2620 · Palo Alto Networks · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode.

Certificate

Certificate number2620
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorPalo Alto Networks · website
Software versions7.0.1-h4, 7.0.3 or 7.0.8

Module description

The VM-Series allows you to protect your applications and data from cyber threats with our next-generation firewall security and advanced threat prevention features.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES3501
CVL568, 569, 570, 571
DRBG871
ECDSA714
HMAC2235
KTS
KTS
RSA1797
SHS2888

Other algorithms

Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #569, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

  • CentOS 6.5 - KVM running on PA-VM-KVM-7.0.1.qcow2
  • Citrix XenServer 6.1.0 running on PA-VM-SDX-7.0.1.xva (single-user mode)
  • VMware ESXi 5.5 running on PA-VM-ESX-7.0.1.ova or PA-VM-NSX-7.0.1.ova

Validation history

DateTypeLab
2016-04-21InitialUL Verification Services, Inc.
2016-09-08UpdateUL Verification Services, Inc.
2018-01-11UpdateUL Verification Services, Inc.
2018-02-13UpdateUL Verification Services, Inc.
2020-02-21UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2016-04-21, 2016-09-08, 2018-01-11, 2018-02-13, 2020-02-21

Source documents