CN-Series

Container firewall for Kubernetes

The first ML-powered next-generation firewall built specifically for Kubernetes environments, providing Layer 7 visibility and threat prevention for container traffic without disrupting DevOps workflows.

Request a quote

Layer 7 security for container environments

CN-Series container firewalls protect inbound, outbound, and east-west traffic between container trust zones and other workload types in Kubernetes environments.

Full container traffic visibility

Layer 7 inspection of container traffic including source IP tracking for outbound connections across namespace boundaries.

Kubernetes-native deployment

YAML-based configuration integrates directly into DevOps workflows, deploying across all cluster nodes with a single command.

Unified management

Panorama provides a single console for managing container, virtual, and hardware firewalls with consistent policy enforcement.

Container security capabilities

CN-Series enables network security teams to safeguard Kubernetes environments with enterprise-grade threat prevention.

Visibility and control

CN-Series provides full Layer 7 traffic visibility, including container source IP of outbound traffic. It detects and prevents threats in allowed traffic traveling between namespace boundaries, giving security teams comprehensive insight into container network behavior.

Streamlined DevOps integration

CN-Series firewalls offer frictionless deployment directly into DevOps workflows. YAML file configuration seamlessly establishes deployment as part of the overall Kubernetes orchestration process, requiring no changes to existing CI/CD pipelines.

Elevated security posture

CN-Series enforces enterprise-level network security and threat protection in container traffic. Kubernetes contextual information is shared with other Palo Alto Networks firewalls, elevating the overall security posture across the organization.

Reduced operational effort

Panorama serves as a single console for managing all network security components and firewalls across physical, virtual, and container form factors, reducing the administrative overhead of maintaining separate management tools.