Panorama 10.2 M-200, M-300, M-600 and M-700
Palo Alto Networks, Inc. - FIPS 140 #4777
Panorama M-Series management appliances provide centralized management and visibility of Palo Alto Networks next generation firewalls. From a central location, you can gain insight into applications, users, and content traversing the firewalls. The knowledge of what is on the network, in conjunction with safe application enablement policies, maximizes protection and control while minimizing administrative effort. Your security team can centrally perform analysis, reporting, and forensics with the aggregated data over time, or on data stored on the local firewall.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4777
- Standard
- FIPS 140-3
- Security level
- Level 2
- Status
- historical
- Status reason
- Replaced by certificate #5367
- Vendor
- Palo Alto Networks, Inc.
- Module type
- Hardware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Leidos Accredited Testing & Evaluation (AT&E) Lab
- First validated
- August 23, 2024
- Versions
- 910-000175 with FIPS Kit 920-000209, 910-000176 with FIPS Kit 920-000208, 910-000270 with FIPS Kit 920-000318, 910-000271 with FIPS Kit 920-000319; 10.2.3-h1
- Caveat
- Interim Validation. When operated in approved mode and when installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper evident seals and physical kit installed as indicated in the Security Policy
- Level exceptions
- Life-cycle assurance: Level 3; Mitigation of other attacks: N/A; Non-invasive security: N/A; Operational environment: N/A; Roles, services, and authentication: Level 3
Algorithms
- AES-CBC
- AES-CFB128
- AES-CTR
- AES-GCM
- Conditioning Component AES-CBC-MAC SP800-90B
- Counter DRBG
- ECDSA KeyGen (FIPS186-4)
- ECDSA KeyVer (FIPS186-4)
- ECDSA SigGen (FIPS186-4)
- ECDSA SigVer (FIPS186-4)
- HMAC-SHA-1
- HMAC-SHA2-224
- HMAC-SHA2-256
- HMAC-SHA2-384
- HMAC-SHA2-512
- KAS-ECC-SSC Sp800-56Ar3
- KAS-FFC-SSC Sp800-56Ar3
- KDF SNMP
- KDF SSHA2906
- KDF TLS
- RSA KeyGen (FIPS186-4)
- RSA SigGen (FIPS186-4)
- RSA SigVer (FIPS186-4)
- Safe Primes Key Generation
- Safe Primes Key Verification
- SHA-1
- SHA2-224
- SHA2-256
- SHA2-384
- SHA2-512
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (29)
- AES-CBC A2906
- AES-CFB128 A2906
- AES-CTR A2906
- AES-GCM A2906
- Conditioning Component AES-CBC-MAC SP800-90B A2518
- Counter DRBG A2906
- ECDSA KeyGen (FIPS186-4) A2906
- ECDSA KeyVer (FIPS186-4) A2906
- ECDSA SigGen (FIPS186-4) A2906
- ECDSA SigVer (FIPS186-4) A2906
- HMAC-SHA-1 A2906
- HMAC-SHA2-224 A2906
- HMAC-SHA2-256 A2906
- HMAC-SHA2-384 A2906
- HMAC-SHA2-512 A2906
- KAS-ECC-SSC Sp800-56Ar3 A2906
- KAS-FFC-SSC Sp800-56Ar3 A2906
- KDF SNMP A2906
- KDF TLS A2906
- RSA KeyGen (FIPS186-4) A2906
- RSA SigGen (FIPS186-4) A2906
- RSA SigVer (FIPS186-4) A2906
- Safe Primes Key Generation A2906
- Safe Primes Key Verification A2906
- SHA-1 A2906
- SHA2-224 A2906
- SHA2-256 A2906
- SHA2-384 A2906
- SHA2-512 A2906
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain