CN-SERIES CONTAINER NGFW
Secure Your Kubernetes Future
CN-SERIES CONTAINER NGFW
Secure Your Kubernetes Future
Keep cloud native applications nimble and secure with the industry’s first ML-Powered Next-Generation Firewall (NGFW) built for Kubernetes® environments.


Use cases

Size and scale — in minutes

Get unmatched flexibility with credit-based licensing so you can size and scale security to match rapidly changing requirements.
Read the solution brief

Deploy seamlessly via DevOps workflows

Use existing tools and processes to deploy CN-Series firewalls as part of the overall Kubernetes orchestration process.

Boost overall security posture

Enforce network security in container traffic, and share Kubernetes contextual information with other Palo Alto Networks firewalls.

Leverage Tag-Based Flexibility

Align firewall policies to business needs. Define them by application, user, content, and native Kubernetes namespaces and labels.


Leverage deep container context

Eliminate container network security gaps

Native deployment within Kubernetes enables seamless integration into CI/CD processes for security at DevOps speed.


Extend network security

Get constant and consistent Kubernetes network security to stay competitive and boost regulatory compliance.

Read the datasheet
  • Integrated into Kubernetes
    100%
  • Application visibility
    100%
  • Command for deployment
    1
  • Integrated into Kubernetes
    100%
  • Application visibility
    100%
  • Command for deployment
    1

Automated deployment

Leverage Kubernetes orchestration to issue a single command for deploying firewalls on all nodes in a cluster at once.

DevOps-friendly

Fast, repeatable deployments

All configurations are specified in a YAML file for easy integration into infrastructure deployment files. Find configuration templates in our official CN-Series GitHub repository.

Visit the GitHub repository
Fast, repeatable deployments
  • Community support

    Using Helm to manage Kubernetes applications? Leverage the CN-Series Helm chart to simplify firewall deployment and management.

  • Cloud support

    Secure hosted container environments by deploying CN-Series firewalls in GKE®, AKS, Amazon EKS and Red Hat OpenShift®.

  • On-premises support

    Deploy CN-Series firewalls into Kubernetes environments hosted on-premises for consistent network security.

Visit the GitHub repository