FIPS 140 and CC enabling

[cengasser]

Couple of questions on FIPS.

1. When you enable FIPS140 on a Palo it wipes the device. Can you just reload your last saved?
2. Can a FIPS140 enabled device talk to a non-FIPS device over an ipsec tunnel provided the cyphers are compatible?
3. FIPS disables PAP. System wide? or Just for authentication to the FW? Our Radius doesn't support CHAP.
4. Anything else that will cause my resume to spontaneously print out?

Thanks.

[OtakarKlier]

Hello,

Here is what happens when FIPS is enabled:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClpHCAS

I would say test, test, test, and this can cause your question 4.

Regards,