CN-Series Deployment—Supported Environments

Learn about the compatibility and version requirements for the CN-Series
You can deploy the CN-Series firewall in the following environments:
Product
Version
Container runtime
Docker
CRI-O
Containerd
Kubernetes version
1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20
Cloud provider managed Kubernetes
  • AWS EKS and EKS on AWS Outpost (1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20)
    CN-Series for EKS on AWS Outpost does not support SR-IOV or Multus.
  • Azure AKS (1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20)
  • GCP GKE (1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20)
  • VMware TKG+ version 1.1.2
    Infrastructure Platform—vSphere 7.0
    Kubernetes Host VM OS—Photon OS
Customer managed Kubernetes
On the public cloud or on-premise data center.
Make sure that the Kubernetes version, CNI Types, and Host VM OS versions are as listed in this table.
Kubernetes Host VM OS
  • Ubuntu 16.04
  • Ubuntu 18.04
  • RHEL/Centos 7.3 and later
  • CoreOS 21XX, 22XX
  • Container-Optimized OS
The Linux Kernel Netfilter: Iptables
CNI Plugins
CNI Spec 0.3 and later:
  • AWS-VPC
  • Azure
  • Calico
  • Flannel
  • Weave
  • Multus (supported on PAN-OS 10.0.1 and later)
  • Bridge (supported on PAN-OS 10.0.1 and later)
  • SR-IOV (supported on PAN-OS 10.0.2 and later)
  • Macvlan (supported on PAN-OS 10.0.2 and later)
  • For Openshift, OpenshiftSDN
OpenShift
Version 4.2, 4.4, 4.5, 4.6, 4.7

Recommended For You