Panorama Virtual Appliance 10.1
Caveat: When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper evident seals and Physical Kit installed as indicated in the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy
Certificate
| Certificate number | 4805 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-09-22 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Palo Alto Networks, Inc. · website |
| Software versions | 10.1.5 |
Module description
Panorama offers easy-to-implement, centralized management features that provide insight into network-wide traffic and simplify configurations.
Security level exceptions
- Roles, services, and authentication: Level 3
- Physical security: N/A
- Non-invasive security: N/A
- Life-cycle assurance: Level 3
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A2244 |
| AES-CFB128 | A2244 |
| AES-CTR | A2244 |
| AES-GCM | A2244 |
| Conditioning Component AES-CBC-MAC SP800-90B | A1791 |
| Counter DRBG | A2244 |
| ECDSA KeyGen (FIPS186-4) | A2244 |
| ECDSA KeyVer (FIPS186-4) | A2244 |
| ECDSA SigGen (FIPS186-4) | A2244 |
| ECDSA SigVer (FIPS186-4) | A2244 |
| HMAC-SHA-1 | A2244 |
| HMAC-SHA2-224 | A2244 |
| HMAC-SHA2-256 | A2244 |
| HMAC-SHA2-384 | A2244 |
| HMAC-SHA2-512 | A2244 |
| KAS-ECC-SSC Sp800-56Ar3 | A2244 |
| KAS-FFC-SSC Sp800-56Ar3 | A2244 |
| KDF SNMP | A2244 |
| KDF SSH | A2244 |
| KDF TLS | A2244 |
| RSA KeyGen (FIPS186-4) | A2244 |
| RSA SigGen (FIPS186-4) | A2244 |
| RSA SigVer (FIPS186-4) | A2244 |
| Safe Primes Key Generation | A2244 |
| Safe Primes Key Verification | A2244 |
| SHA-1 | A2244 |
| SHA2-224 | A2244 |
| SHA2-256 | A2244 |
| SHA2-384 | A2244 |
| SHA2-512 | A2244 |
Tested configurations
- Hyper-V 2019 on Microsoft Hyper-V Server 2019 running on a Dell PowerEdge R740 with an with Intel Xeon Gold 6248
- KVM 4 on Ubuntu 20.04 running on a Dell PowerEdge R740 with an with Intel Xeon Gold 6248
- VMware ESXi 7 running on a Dell PowerEdge R740 with an with Intel Xeon Gold 6248
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-09-23 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2025-03-13 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-09-23