808bits

Palo Alto Networks SD-WAN Virtual Instant-On Network (vION)

FIPS 140-3 certificate #4768 · Palo Alto Networks, Inc. · data as of 2026-09-12

Palo Alto Networks SD-WAN Virtual Instant-On Network (vION), from Palo Alto Networks, Inc., holds FIPS 140-3 certificate #4768 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5330. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When installed, initialized and configured as specified in section "Secure Operation" of the Security Policy and operated in approved mode

Certificate

Certificate number4768
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorPalo Alto Networks, Inc. · website
Software versions6.1.2

Module description

Quoted from the NIST CMVP entry for this certificate.

The Palo Alto Networks SD-WAN Virtual Instant-On Network (vION) enables the integration of a diverse set of wide area network (WAN) connection types, improves application performance and visibility, enhances security and compliance, and reduces the overall cost and complexity of your WAN.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (27)

AlgorithmCAVP certificates
AES-CBCA3564, A3566
AES-CTRA3563
AES-ECBA3563
AES-GCMA3563, A3564
Counter DRBGA3563
ECDSA KeyGen (FIPS186-4)A3563, A3564
ECDSA SigGen (FIPS186-4)A3563
ECDSA SigVer (FIPS186-4)A3563
HMAC DRBGA3564
HMAC-SHA-1A3563
HMAC-SHA2-224A3563
HMAC-SHA2-256A3564, A3566
HMAC-SHA2-384A3563, A3564
HMAC-SHA2-512A3563, A3564
KAS-ECC-SSC Sp800-56Ar3A3563, A3564
KDF IKEv2A3563
KDF SNMPA3563
KDF SSHA3563
KDF TLSA3563, A3564
RSA KeyGen (FIPS186-4)A3563
RSA SigGen (FIPS186-4)A3563
RSA SigVer (FIPS186-4)A3563, A3572
SHA-1A3566
SHA2-224A3563, A3564
SHA2-256A3563, A3564
SHA2-384A3563, A3564
SHA2-512A3563, A3564

Tested configurations

  • KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 with PAA
  • KVM on Ubuntu 20.04 running on Supermicro SYS-2049-TR with Intel Xeon Gold 6230 without PAA

Validation history

DateTypeLab
2024-08-19InitialGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-19

Source documents