SOC2

As part of our commitment to data security and privacy, we maintain SOC 2 certification for products across the platform. This third-party validation supports the foundation of trust between Palo Alto Networks and our customers.

FedRAMP

FedRAMP provides a standardized approach to security assessment, authorization, and monitoring that minimizes cybersecurity risk for U.S. federal agencies as they move to the cloud. Palo Alto Networks FedRAMP Authorized cybersecurity services work together to rapidly and consistently protect your endpoint, network and cloud environments.

Common Criteria

Common Criteria is an internationally recognized standard and an ISO standard (ISO-IEC15408) for evaluating the security claims of IT products and systems. The National Information Assurance Partnership (NIAP) is responsible for U.S. implementation of the Common Criteria, including management of the NIAP Common Criteria Evaluation and Validation Scheme (CCEVS) validation body. Palo Alto Networks PAN-OS Next-Generation Firewall, Panorama network security management, as well as WildFire private cloud appliance have been Common Criteria validated by NIAP.

FIPS 140-2

Palo Alto Networks products have been validated against FIPS 140-2, a certification focused on cryptographic functionality. The following certificates have been issued by the National Institute of Standards and Technology (NIST) under the Cryptographic Module Validation Program (CMVP)

DoDIN Approved Product List

The Department of Defense Information Network (DoDIN) Approved Products List (APL) is the single consolidated list of products that have completed Cybersecurity (CS) and Interoperability (IO) certification.

Commercial Solutions for Classified (CSfC)

Palo Alto Networks, Inc.’s Next Generation Firewall Product Series is eligible to be used as a Traffic Filtering Firewall component in a CSfC solution. More information can be found at www.nsa.gov...

USGV6

Palo Alto Networks next-generation firewalls have completed IPv6 conformance testing as firewall, IDS, and IPS devices. USGv6, a testing program from the National Institute of Standards and Technology (NIST) provides proof of compliance to IPv6 specifications outlined in current industry standards for common network products...

ICSA

Palo Alto Networks next-generation firewalls and WildFire cloud-based threat analysis environment have been tested and certified by ICSA Labs, an independent division of Verizon. Certified firewall solutions passed the evaluation against ICSA Labs Modular Firewall Product Certification Criteria version 4.2x for general-purpose...

NEBS

Network Equipment Building System (NEBS) Level 3 certification is in place for select Palo Alto Networks next-generation firewalls, which is the most common set of safety, spatial and environmental design guidelines applied to telecommunications equipment in the United States.