808bits

Palo Alto Networks SD-WAN ION Core Crypto Module

FIPS 140-3 certificate #4715 · Palo Alto Networks, Inc. · data as of 2026-10-09

Palo Alto Networks SD-WAN ION Core Crypto Module, from Palo Alto Networks, Inc., holds FIPS 140-3 certificate #4715 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5392. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When installed, initialized and configured as specified in section "Secure Operation" of the Security Policy and operated in approved mode

Certificate

Certificate number4715
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorPalo Alto Networks, Inc. · website
Software versions1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Palo Alto Networks SD-WAN ION Core Crypto Module is utilized in hardware and software ION form factors. These enable the integration of a diverse set of wide area network (WAN) connection types, improve application performance and visibility, enhance security and compliance, and reduce the overall cost and complexity of your WAN.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (27)

AlgorithmCAVP certificates
AES-CBCA3564, A3566
AES-CTRA3563
AES-ECBA3563
AES-GCMA3563, A3564
Counter DRBGA3563
ECDSA KeyGen (FIPS186-4)A3563, A3564
ECDSA SigGen (FIPS186-4)A3563
ECDSA SigVer (FIPS186-4)A3563
HMAC DRBGA3564
HMAC-SHA-1A3563
HMAC-SHA2-224A3563
HMAC-SHA2-256A3564, A3566
HMAC-SHA2-384A3563, A3564
HMAC-SHA2-512A3563, A3564
KAS-ECC-SSC Sp800-56Ar3A3563, A3564
KDF IKEv2A3563
KDF SNMPA3563
KDF SSHA3563
KDF TLSA3563, A3564
RSA KeyGen (FIPS186-4)A3563
RSA SigGen (FIPS186-4)A3563
RSA SigVer (FIPS186-4)A3563, A3572
SHA-1A3566
SHA2-224A3563
SHA2-256A3563, A3564
SHA2-384A3563, A3564
SHA2-512A3563, A3564

Tested configurations

  • ION 6.1 running on ION 1200 with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200 with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 1200-C-5G-WW with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200-C-5G-WW with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 1200-C-NA with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200-C-NA with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 1200-C-ROW with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200-C-ROW with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 1200-S with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200-S with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 1200-S-C-5G-WW with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200-S-C-5G-WW with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 1200-S-C-NA with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200-S-C-NA with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 1200-S-C-ROW with Intel Atom C3436L with PAA
  • ION 6.1 running on ION 1200-S-C-ROW with Intel Atom C3436L without PAA
  • ION 6.1 running on ION 3200 with Intel Atom C3558R with PAA
  • ION 6.1 running on ION 3200 with Intel Atom C3558R without PAA
  • ION 6.1 running on ION 5200 with Intel Atom C5325 with PAA
  • ION 6.1 running on ION 5200 with Intel Atom C5325 without PAA
  • ION 6.1 running on ION 9200 with Intel Atom P5362 with PAA
  • ION 6.1 running on ION 9200 with Intel Atom P5362 without PAA

Validation history

DateTypeLab
2024-07-08InitialGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-07-08

Source documents