Features Not Supported on the CN-Series

Authentication
Logs to Cortex Data Lake
Enterprise DLP
Interfaces other than virtual wires are not supported.
IoT Security
IPv6
NAT
SNMP
Policy Based Forwarding
QoS
SD-WAN
Tunnel Content Inspection, supported on CN-Series running 10.0.3 or later
User-ID
WildFire Inline ML
No Support for GlobalProtect and Software updates from the Device Deployment tab on Panorama.
Only Plugin and Dynamic Updates for content release versions are supported.