Prisma SD-WAN Controller's Cryptographic Module
Prisma SD-WAN Controller's Cryptographic Module, from Palo Alto Networks, Inc., holds FIPS 140-2 certificate #4668 at overall level 1. The validation is active, with a sunset date of 2026-09-21. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode. When operated per the Security Policy. No assurance of minimum security of keys and bit strings that are externally loaded, or of keys and CSPs established with externally loaded bit strings
Certificate
| Certificate number | 4668 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Palo Alto Networks, Inc. · website |
| Software versions | 1.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Palo Alto Networks Controller allows operators the ability to manage ION devices to administer security policy rules and provides various application and network analytics.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms (12)
| Algorithm | CAVP certificates |
|---|---|
| AES | A2476, A2496 |
| CKG | vendor affirmed |
| CVL | A2476, A2496 |
| DRBG | A2476, A2496 |
| ECDSA | A2476, A2496 |
| HMAC | A2476, A2496 |
| KAS | |
| KAS-SSC | A2476, A2496 |
| KBKDF | A2496 |
| KTS | |
| RSA | A2476, A2496 |
| SHS | A2476, A2496 |
Tested configurations
- JDK 11.0.10 on Ubuntu 14.04 running on Dell Power Edge R740 with Intel(R) Xeon(R) Platinum 8260 CPU @ 2.40GHz with PAA
- JDK 11.0.10 on Ubuntu 14.04 running on Dell Power Edge R740 with Intel(R) Xeon(R) Platinum 8260 CPU @ 2.40GHz without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-12-05 | Initial | ADVANCED DATA SECURITY |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2023-12-05