Prisma SD-WAN Controller's Cryptographic Module
Caveat: When operated in FIPS mode. When operated per the Security Policy. No assurance of minimum security of keys and bit strings that are externally loaded, or of keys and CSPs established with externally loaded bit strings
Certificate
| Certificate number | 4668 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Palo Alto Networks, Inc. · website |
| Software versions | 1.0 |
Module description
The Palo Alto Networks Controller allows operators the ability to manage ION devices to administer security policy rules and provides various application and network analytics.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A2476, A2496 |
| CKG | vendor affirmed |
| CVL | A2476, A2496 |
| DRBG | A2476, A2496 |
| ECDSA | A2476, A2496 |
| HMAC | A2476, A2496 |
| KAS | |
| KAS-SSC | A2476, A2496 |
| KBKDF | A2496 |
| KTS | |
| RSA | A2476, A2496 |
| SHS | A2476, A2496 |
Tested configurations
- JDK 11.0.10 on Ubuntu 14.04 running on Dell Power Edge R740 with Intel(R) Xeon(R) Platinum 8260 CPU @ 2.40GHz with PAA
- JDK 11.0.10 on Ubuntu 14.04 running on Dell Power Edge R740 with Intel(R) Xeon(R) Platinum 8260 CPU @ 2.40GHz without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-12-05 | Initial | ADVANCED DATA SECURITY |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2023-12-05