Quickstart- CN-Series Firewall Deployment

Table of Contents

Software Cut-through Based Offload on CN-Series Firewall

Quickstart- CN-Series Firewall Deployment

Where Can I Use This?	What Do I Need?
CN-Series deployment	CN-Series 10.1.x or above Container Images Panorama running PAN-OS 10.1.x or above version Helm 3.6 or above version client for CN-Series deployment using Helm

Get started with

CN-Series

deployment using the following steps:

Create a Deployment Profile.

Install a Device Certificate on the CN-Series Firewall.

Install the Kubernetes Plugin and Set up Panorama for CN-Series.

Download the CN-Series deployment files from the Palo Alto Networks GitHub repository. Get the files from the Native-k8s folder for use with native Kubernetes on-premises or cloud deployments

Deploy the

CN-Series

with or without the HELM Charts repository.

It is recommended to deploy the CN-Series firewall using the HELM chart
.

Configure Panorama to Secure a Kubernetes Deployment

You can choose to deploy your CN-Series firewall in following deployment modes:

Deploy the CN-Series Firewall as a Kubernetes Service (Recommended mode of Deployment)- The CN-Series firewall is deployed in a cluster deployment model. This mode of deployment uses auto scaling capabilities, improves utilization, reduces cost, and increases scale with native kubernetes based deployment models.

Deploy the CN-Series Firewall as a DaemonSet- The CN-Series firewall is deployed in a distributed deployment model. This mode of deployment is more suitable when you have a smaller number of nodes to secure per environment.

Deploy the CN-Series Firewall as a Kubernetes CNF- This mode of deployment protects both container and non-container workloads. You can deploy as a standalone layer 3 deployment.

Software Cut-through Based Offload on CN-Series Firewall

Deployment Modes of CN-Series Firewalls

CN-Series Firewall Docs

Quickstart- CN-Series Firewall Deployment

CN-Series Firewall Docs

Quickstart- CN-Series Firewall Deployment

Recommended For You

Activation & Onboarding

Next-Generation Firewalls

Cloud-Delivered Security Services

Best Practices

Experts Corner