808bits

Palo Alto Networks SD-WAN Virtual Instant-On Network (vION)

FIPS 140-3 certificate #4768 · Palo Alto Networks, Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5330. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When installed, initialized and configured as specified in section "Secure Operation" of the Security Policy and operated in approved mode

Certificate

Certificate number4768
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorPalo Alto Networks, Inc. · website
Software versions6.1.2

Module description

The Palo Alto Networks SD-WAN Virtual Instant-On Network (vION) enables the integration of a diverse set of wide area network (WAN) connection types, improves application performance and visibility, enhances security and compliance, and reduces the overall cost and complexity of your WAN.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3564
AES-CBCA3566
AES-CTRA3563
AES-ECBA3563
AES-GCMA3563
AES-GCMA3564
Counter DRBGA3563
ECDSA KeyGen (FIPS186-4)A3563
ECDSA KeyGen (FIPS186-4)A3564
ECDSA SigGen (FIPS186-4)A3563
ECDSA SigVer (FIPS186-4)A3563
HMAC DRBGA3564
HMAC-SHA-1A3563
HMAC-SHA2-224A3563
HMAC-SHA2-256A3564
HMAC-SHA2-256A3566
HMAC-SHA2-384A3563
HMAC-SHA2-384A3564
HMAC-SHA2-512A3563
HMAC-SHA2-512A3564
KAS-ECC-SSC Sp800-56Ar3A3563
KAS-ECC-SSC Sp800-56Ar3A3564
KDF IKEv2A3563
KDF SNMPA3563
KDF SSHA3563
KDF TLSA3563
KDF TLSA3564
RSA KeyGen (FIPS186-4)A3563
RSA SigGen (FIPS186-4)A3563
RSA SigVer (FIPS186-4)A3563
RSA SigVer (FIPS186-4)A3572
SHA-1A3566
SHA2-224A3563
SHA2-224A3564
SHA2-256A3563
SHA2-256A3564
SHA2-384A3563
SHA2-384A3564
SHA2-512A3563
SHA2-512A3564

Tested configurations

  • KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 with PAA
  • KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 without PAA

Validation history

DateTypeLab
2024-08-19InitialGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-19

Source documents