FIPS 140

The Federal Information Processing Standard (FIPS) 140 is a U.S. Government standard that defines the security requirements for cryptographic modules protecting sensitive information.
This cryptographic module standard applies to systems sold to the U.S. Federal Government and certain regulated industries (such as healthcare and finance) that handle sensitive information. FIPS 140-2 and 140-3 have four levels of security, with level 1 containing the lowest level of security assurance and level 4 being the highest. FIPS 140-2 and 140-3 compliances are recognized around the world as the benchmark for cryptographic module security in both public sector and industries outside of the public sector.

Compliant Products & Offerings


The following certificates have been issued by the National Institute of Standards and Technology (NIST) under the Cryptographic Module Validation Program (CMVP).

Visit the Cryptographic Module Validation Program Portal. In the Vendor section type in ‘Palo Alto Networks’ and then select ‘Search’.