PAN-OS 11.1 and later

Table of Contents

PAN-OS 11.1 and later

5G-Native Security is exclusively supported on Daemonset and Kubernetes CNF Mode.

The memory and core combinations for CN-MGMT and CN-NGFW applies to small, medium, and large respectively. The combination of Small, Medium, and Large pertaining to CN-MGMT maps directly with respective CN-NGFW.

Recommended CN-Series system and Capacity Matrix
CN Mode	Resource	Small	Medium	Medium	Medium	Large	Large
Daemonset	Min CN-MGMT Memory	5G	5G	8G	8G	16G	16G
	Min CN-NGFW Memory	3G	6.5G	16G	32G	48G	56G
	Recommended CN-MGMT Cores	2	2	2	4	8	12
	Max CN-NGFW Cores	2	4	8	16	31	47
	Disk	52Gi	52Gi	52Gi	52Gi	52Gi	52Gi
	DPDK Hugepage Size	N/A	N/A	N/A	N/A	N/A	N/A
Kubernetes Service	Min CN-MGMT Memory	5G	5G	8G	8G	16G	16G
	Min CN-NGFW Memory	4G	6.5G	16G	32G	48G	56G
	Recommended CN-MGMT Cores	2	2	2	4	8	12
	Max CN-NGFW Cores	2	4	8	16	31	47
	Disk	52Gi	52Gi	52Gi	52Gi	52Gi	52Gi
	DPDK Hugepage Size	N/A	N/A	N/A	N/A	N/A	N/A
Kubernetes CNF	Min CN-MGMT Memory	5G	5G	8G	8G	16G	16G
	Min CN-NGFW Memory	2G	6.5G	16G	32G	48G	56G
	Recommended CN-MGMT Cores	2	2	2	4	8	12
	Max CN-NGFW Cores	2	4	8	16	31	47
	Disk	52Gi	52Gi	52Gi	52Gi	52Gi	52Gi
	DPDK Hugepage Size	1G	1G	2G	2G	4G	4G

CN-Series Firewall Docs

PAN-OS 11.1 and later

CN-Series Firewall Docs

PAN-OS 11.1 and later

Activation & Onboarding

Next-Generation Firewalls

Cloud-Delivered Security Services

Best Practices

Experts Corner

Translated Documents