Home
Products
Releases
Best Practices
Resources
By Type
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
Products
Releases
Best Practices
Resources
By Type
Network Security
Cloud-Delivered Security Services
Advanced DNS Security
Advanced WildFire
Advanced Threat Prevention
Advanced URL Filtering
AI Access Security
Enterprise Data Loss Prevention
SaaS Security
IoT Security
Cloud Identity Engine
Cloud NGFW for AWS
Cloud NGFW for Azure
CN-Series
Common Services
License Activation & Subscription Management
Tenant Management
Identity & Access Management
Device Associations
FAQ
GlobalProtect
Next-Generation Firewall
PAN-OS
AIOps for NGFW
Firewalls
SD-WAN
Service Provider
Panorama
Strata Logging Service
Strata Cloud Manager
AI Runtime Security
VM-Series
Secure Access Service Edge
Common Services
License Activation & Subscription Management
Tenant Management
Identity & Access Management
Device Associations
FAQ
FedRAMP
Next-Generation CASB
Prisma Access
Autonomous DEM
Prisma Access Browser
Prisma SD-WAN
ION Devices
Remote Browser Isolation
Strata Cloud Manager
Strata Multitenant Cloud Manager
Cloud-Native Security
Prisma Cloud
Security Operations
Cortex XDR
Cortex XSOAR
Cortex XPANSE
Cortex XSIAM
What's New
What's New Releases
All Release Notes
View All Release Notes
Recently Updated Release Notes
Release Notes
PAN-OS Release Notes (PAN-OS 11.1)
PAN-OS Release Notes (PAN-OS 11.2)
PAN-OS Release Notes (PAN-OS 10.2)
Strata Cloud Manager Release Notes
Terminal Server (TS) Agent Release Notes (11.0)
User-ID™ Agent Release Notes (11.0)
Release Notes
GlobalProtect™ App Release Notes (6.0)
See All Recently Updated Release Notes
Recently Updated Documentation
SaaS Security Inline Administration
Administration
Activation & Onboarding
Getting Started
Activation & Onboarding
Activation & Onboarding
Getting Started
VM-Series Performance & Capacity on Public Clouds (11.1)
Prisma Access Administration (4.0 & Later)
Prisma Access Release Notes (4.2 Preferred)
See All Recent Updates
Applications and Threats Content Updates
Best Practices for Migrating to Application-Based Policy
Data Center
Decryption
DoS and Zone
Get Started
Internet Gateway Security Policy
Secure Administrative Access
Security Policy
WildFire
Zero Trust
VIEW ALL
All Release Notes
Blog
Compatibility Matrix
Experts Corner
Infographics
Licensing, Registration, and Activation
OSS Listings
Translated Documents
VIEW ALL
API Documentation
Release Notes
CN-Series HSF Deployment
CN-Series HSF Deployment
CN-Series Documentation
All Documentation
>
Clear
Search
Loading
Clear
Features Not Supported on the CN-Series
Updated on
Thu Mar 13 12:12:30 UTC 2025
Focus
Download PDF
Updated on
Thu Mar 13 12:12:30 UTC 2025
Focus
Home
CN-Series
CN-Series HSF
Features Not Supported on the CN-Series
Download PDF
CN-Series
Features Not Supported on the CN-Series
Table of Contents
Filter
Expand All
|
Collapse All
CN-Series Firewall Docs
Activation & Onboarding
License the CN-Series Firewall
Activate Credits
Create and Manage a Deployment Profile to activate CN-Series License
Install a Device Certificate on the CN-Series Firewall
CN-Series Prerequisites and Supported Environments
Install the Kubernetes Plugin and Set up Panorama for CN-Series
Getting Started
CN-Series Firewall for Kubernetes
Secure Kubernetes Workloads with CN-Series Firewall
CN-Series Key Concepts
CN-Series Core Building Blocks
Components Required to Secure Kubernetes Clusters with CN-Series Firewall
Additional CN-Series Resources
CN-Series System Requirements for the Kubernetes Cluster
CN-Series System Requirements for On-Premises Kubernetes Deployments
CN-Series Performance and Scaling
Create Service Accounts for Cluster Authentication
Get the Images and Files for the CN-Series Deployment
Strata Logging Service with CN-Series Firewall
IOT Security Support for CN-Series Firewall
Software Cut-through Based Offload on CN-Series Firewall
Deployment
Version
HSF
Deployment Modes
HSF
In-Cloud and On-Prem
CN-Series HSF
CN-Series HSF Architecture
Types of Pods
Interconnect Links
CN-Series HSF System Requirements
Prerequisites to Deploy the CN-Series HSF
Cluster Requirements
Prepare the Cluster
Prepare Panorama for CN-Series HSF Deployment
Deploy the HSF Cluster
Different States of Deployment
Configure Traffic Flow Towards CN-Series HSF
Test Case: Layer 3 BFD Based CN-GW Failure Handling
View CN-Series HSF Summary and Monitoring
Validating the CN-Series HSF Deployment
Custom Metric Based HPA Using KEDA in EKS Environments
Configure Dynamic Routing in CN-Series HSF
CN-Series HSF: Use Cases
5G Traffic Testing
Scale Out Firewalls Based on Custom Metrics Supported
Test Case: CN-MGMT Failure Handling
Test Case: CN-NGFW Failure Handling
Test Case: CN-DB Failure Handling
Features Not Supported on the CN-Series
Upgrade
Upgrade the CN-Series Firewall
Migrate the CN-Series Firewall
Upgrade the CN-Series Firewall—Rolling Update
Upgrade the CN-Series Firewall—Redeploy
Troubleshooting
CN-Series Troubleshooting
Release Notes
CN-Series Firewall Release Notes
CN-Series YAML
CN-Series CNI
CN-Series PAN-MGMT-INIT
CN-Series 11.x
CN-Series 11.2.0
CN-Series 11.1.0
CN-Series 11.0.1
Known Issues in CN-Series 11.x
CN-Series 10.x
Known Issues in CN-Series 10.x
Addressed Issues in CN-Series 10.x
Previous
Test Case: CN-DB Failure Handling
Next
Upgrade the CN-Series Firewall
Features Not Supported on the CN-Series
Review what is not supported on the CN-Series firewalls.
The following capabilities supported on PAN-OS are not available for the CN-Series unless otherwise noted below.
Feature
DaemonSet
K8s Service
CNF Mode
HSF Mode
Authentication
No
No
No
No
Logs to Strata Logging Service
Yes
Yes
Yes
Yes
Enterprise DLP
No
No
No
No
Non-vWire Interfaces
No
No
Yes
Yes
IoT Security
Yes
Yes
Yes
Yes
IPv6
Yes
No
Yes
No
NAT
No
No
Yes
No
Policy-Based Forwarding
No
No
Yes
No
QoS
No
No
No
No
SD-WAN
No
No
No
No
User-ID
No
No
No
No
WildFire Inline ML
No
No
No
No
SaaS Inline
No
No
No
No
IPSec
No
No
No
No
Tunnel Content Inspection
No
No
No
No
Previous
Test Case: CN-DB Failure Handling
Next
Upgrade the CN-Series Firewall