WildFire 10.1 WF-500
Palo Alto Networks, Inc. - FIPS 140 #4807
The Wildfire 10.1 WF-500 from Palo Alto Networks Inc. cryptographic module designed to identify unknown malware, zero-day exploits, and Advanced Persistent Threats (APTs) through dynamic analysis, and automatically disseminates protection in near real-time to help security teams meet the challenge of advanced cyber-attacks.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4807
- Standard
- FIPS 140-3
- Security level
- Level 2
- Status
- active
- Vendor
- Palo Alto Networks, Inc.
- Module type
- Hardware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Leidos Accredited Testing & Evaluation (AT&E) Lab
- First validated
- September 23, 2024
- Sunset date
- September 22, 2029
- Versions
- 910-000097 with Physical Kit 920-000145; 10.1.5
- Caveat
- When installed, initialized and configured as specified in Section 11 of the Security Policy. The tamper evident seals and Physical Kit installed as indicated in the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy
- Level exceptions
- Life-cycle assurance: Level 3; Mitigation of other attacks: N/A; Non-invasive security: N/A; Operational environment: N/A; Roles, services, and authentication: Level 3
Algorithms
- AES-CBC
- AES-CFB128
- AES-CTR
- AES-GCM
- Counter DRBG
- ECDSA KeyGen (FIPS186-4)
- ECDSA KeyVer (FIPS186-4)
- ECDSA SigGen (FIPS186-4)
- ECDSA SigVer (FIPS186-4)
- HMAC-SHA-1
- HMAC-SHA2-224
- HMAC-SHA2-256
- HMAC-SHA2-384
- HMAC-SHA2-512
- KAS-ECC-SSC Sp800-56Ar3
- KAS-FFC-SSC Sp800-56Ar3
- KDF IKEv2
- KDF SNMP
- KDF SSHA2137
- KDF TLS
- RSA KeyGen (FIPS186-4)
- RSA SigGen (FIPS186-4)
- RSA SigVer (FIPS186-4)
- Safe Primes Key Generation
- Safe Primes Key Verification
- SHA-1
- SHA2-224
- SHA2-256
- SHA2-384
- SHA2-512
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (29)
- AES-CBC A2137
- AES-CFB128 A2137
- AES-CTR A2137
- AES-GCM A2137
- Counter DRBG A2137
- ECDSA KeyGen (FIPS186-4) A2137
- ECDSA KeyVer (FIPS186-4) A2137
- ECDSA SigGen (FIPS186-4) A2137
- ECDSA SigVer (FIPS186-4) A2137
- HMAC-SHA-1 A2137
- HMAC-SHA2-224 A2137
- HMAC-SHA2-256 A2137
- HMAC-SHA2-384 A2137
- HMAC-SHA2-512 A2137
- KAS-ECC-SSC Sp800-56Ar3 A2137
- KAS-FFC-SSC Sp800-56Ar3 A2137
- KDF IKEv2 A2137
- KDF SNMP A2137
- KDF TLS A2137
- RSA KeyGen (FIPS186-4) A2137
- RSA SigGen (FIPS186-4) A2137
- RSA SigVer (FIPS186-4) A2137
- Safe Primes Key Generation A2137
- Safe Primes Key Verification A2137
- SHA-1 A2137
- SHA2-224 A2137
- SHA2-256 A2137
- SHA2-384 A2137
- SHA2-512 A2137
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain