Wildfire 10.2 WF-500 and WF-500-B
Caveat: When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper evident seals and Physical Kit installed as indicated in the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy
Certificate
| Certificate number | 4784 |
|---|---|
| Standard | FIPS 140-3 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Palo Alto Networks, Inc. · website |
| Hardware versions | 910-000097 with FIPS Kit 920-000145, 910-000270 with FIPS Kit 920-000318 |
| Firmware versions | 10.2.3-h1 |
| Entropy | ENT (NP) |
Module description
The Wildfire 10.2 WF-500 and WF-500-B from Palo Alto Networks Inc. cryptographic modules designed to identify unknown malware, zero-day exploits, and Advanced Persistent Threats (APTs) through dynamic analysis, and automatically disseminates protection in near real-time to help security teams meet the challenge of advanced cyber-attacks.
Security level exceptions
- Roles, services, and authentication: Level 3
- Operational environment: N/A
- Non-invasive security: N/A
- Life-cycle assurance: Level 3
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A2906 |
| AES-CFB128 | A2906 |
| AES-CTR | A2906 |
| AES-GCM | A2906 |
| Conditioning Component AES-CBC-MAC SP800-90B | A2518 |
| Counter DRBG | A2906 |
| ECDSA KeyGen (FIPS186-4) | A2906 |
| ECDSA KeyVer (FIPS186-4) | A2906 |
| ECDSA SigGen (FIPS186-4) | A2906 |
| ECDSA SigVer (FIPS186-4) | A2906 |
| HMAC-SHA-1 | A2906 |
| HMAC-SHA2-224 | A2906 |
| HMAC-SHA2-256 | A2906 |
| HMAC-SHA2-384 | A2906 |
| HMAC-SHA2-512 | A2906 |
| KAS-ECC-SSC Sp800-56Ar3 | A2906 |
| KAS-FFC-SSC Sp800-56Ar3 | A2906 |
| KDF IKEv2 | A2906 |
| KDF SNMP | A2906 |
| KDF SSH | A2906 |
| KDF TLS | A2906 |
| RSA KeyGen (FIPS186-4) | A2906 |
| RSA SigGen (FIPS186-4) | A2906 |
| RSA SigVer (FIPS186-4) | A2906 |
| Safe Primes Key Generation | A2906 |
| Safe Primes Key Verification | A2906 |
| SHA-1 | A2906 |
| SHA2-224 | A2906 |
| SHA2-256 | A2906 |
| SHA2-384 | A2906 |
| SHA2-512 | A2906 |
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-08-29 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2025-03-13 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2024-08-29