CN-Series is the container native version of the ML-powered Next-Generation Firewall (NGFW) that is designed specifically for Kubernetes environments. CN-Series container firewalls help network security teams safeguard developers with deep security integration into Kubernetes orchestration. Deploy the CN-Series to secure traffic between pods in different trust zones and namespaces, for protection against known and zero-day malware, and to block data exfiltration from your containerized environments. 

Using Panorama as the centralized management platform, your network security teams can consistently manage firewall policies for physical, virtual, container, and public cloud workloads from a single interface. 

Documentation

CN-Series Deployment Guide

VM-Series and Panorama Plugins Release Notes

PAN-OS® Release Notes