808bits

Palo Alto Networks VM-Series

FIPS 140-2 certificate #3479 · Palo Alto Networks · data as of 2026-08-28
Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number3479
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorPalo Alto Networks · website
Software versions8.1.3 and 8.1.6

Module description

The Palo Alto Networks VM-Series allows you to protect your applications and data from cyber threats with our next-generation firewall security, and advanced threat prevention features.

Security level exceptions

  • Roles, Services, and Authentication: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES5902
CKGvendor affirmed
CVL2128, 2129, 2130, 2131
DRBG2464
DSA1497
ECDSA1575
HMAC3882
KASvendor affirmed
KTS
KTS
RSA3090
SHS4658

Allowed algorithms

Diffie-Hellman (CVL Cert. #2128 with CVL Cert. #2130, key agreement; key establishment methodology provides 112 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

  • KVM on CentOS 7.2 running on a Dell Power Edge R730 with Intel Xeon E5-2630 CPU
  • Microsoft Hyper-V 2012R2 running on a Dell PowerEdge R730 with Intel Xeon E5-2640 CPU (single user mode)
  • VMware ESXi v5.5 running on a Dell PowerEdge R730 with Intel Xeon E5-2640 CPU
  • VMware ESXi v5.5 running on a PacStar 451 with Intel Xeon E3-1248 CPU

Validation history

DateTypeLab
2019-06-27InitialUL Verification Services, Inc.
2020-02-21UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-06-27, 2020-02-21

Source documents