808bits

Panorama 10.1 on Hardware Appliances

FIPS 140-3 certificate #4806 · Palo Alto Networks, Inc. · data as of 2026-08-28
Active. Sunset date 2029-09-22, 1120 days away.
Caveat: When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper evident seals and Physical Kit installed as indicated in the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy

Certificate

Certificate number4806
StandardFIPS 140-3
Statusactive
Sunset date2029-09-22
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorPalo Alto Networks, Inc. · website
Hardware versions910-000176 with FIPS Kit 920-000208, 910-000073 with FIPS Kit 920-000145, 910-000175 with FIPS Kit 920-000209
Firmware versions10.1.5

Module description

Panorama M-Series management appliances provide centralized management and visibility of Palo Alto Networks next generation firewalls. From a central location, you can gain insight into applications, users, and content traversing the firewalls. The knowledge of what is on the network, in conjunction with safe application enablement policies, maximizes protection and control while minimizing administrative effort. Your security team can centrally perform analysis, reporting, and forensics with the aggregated data over time, or on data stored on the local firewall.

Security level exceptions

  • Roles, services, and authentication: Level 3
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Life-cycle assurance: Level 3
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA2137
AES-CFB128A2137
AES-CTRA2137
AES-GCMA2137
Conditioning Component AES-CBC-MAC SP800-90BA2165
Counter DRBGA2137
ECDSA KeyGen (FIPS186-4)A2137
ECDSA KeyVer (FIPS186-4)A2137
ECDSA SigGen (FIPS186-4)A2137
ECDSA SigVer (FIPS186-4)A2137
HMAC-SHA-1A2137
HMAC-SHA2-224A2137
HMAC-SHA2-256A2137
HMAC-SHA2-384A2137
HMAC-SHA2-512A2137
KAS-ECC-SSC Sp800-56Ar3A2137
KAS-FFC-SSC Sp800-56Ar3A2137
KDF SNMPA2137
KDF SSHA2137
KDF TLSA2137
RSA KeyGen (FIPS186-4)A2137
RSA SigGen (FIPS186-4)A2137
RSA SigVer (FIPS186-4)A2137
Safe Primes Key GenerationA2137
Safe Primes Key VerificationA2137
SHA-1A2137
SHA2-224A2137
SHA2-256A2137
SHA2-384A2137
SHA2-512A2137

Tested configurations

  • N/A

Validation history

DateTypeLab
2024-09-23InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2025-03-13UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-09-23

Source documents