CN-Series
PAN-OS 11.1 and later
Table of Contents
Expand All
|
Collapse All
CN-Series Firewall Docs
-
-
- Deployment Modes
- HSF
- In-Cloud and On-Prem
-
-
-
PAN-OS 11.1 and later
5G-Native Security is exclusively supported on Daemonset and Kubernetes CNF Mode.
The memory and core combinations for CN-MGMT and CN-NGFW applies to small, medium,
and large respectively. The combination of Small, Medium, and Large pertaining to
CN-MGMT maps directly with respective CN-NGFW.
| CN Mode | Resource | Small | Medium | Medium | Medium | Large | Large |
|---|---|---|---|---|---|---|---|
| Daemonset |
Min CN-MGMT Memory
|
5G
|
5G
|
8G
|
8G
|
16G
|
16G
|
|
Min CN-NGFW Memory
|
2G
|
6.5G
|
16G
|
32G
|
48G
|
56G
| |
|
Recommended CN-MGMT Cores
|
2
|
2
|
2
|
4
|
8
|
12
| |
|
Max CN-NGFW Cores
|
2
|
4
|
8
|
16
|
31
|
47
| |
|
Disk
|
52Gi
|
52Gi
|
52Gi
|
52Gi
|
52Gi
|
52Gi
| |
|
DPDK Hugepage Size
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
| |
| Kubernetes Service |
Min CN-MGMT Memory
|
5G
|
5G
|
8G
|
8G
|
16G
|
16G
|
|
Min CN-NGFW Memory
|
4G
|
6.5G
|
16G
|
32G
|
48G
|
56G
| |
|
Recommended CN-MGMT Cores
|
2
|
2
|
2
|
4
|
8
|
12
| |
|
Max CN-NGFW Cores
|
2
|
4
|
8
|
16
|
31
|
47
| |
|
Disk
|
52Gi
|
52Gi
|
52Gi
|
52Gi
|
52Gi
|
52Gi
| |
|
DPDK Hugepage Size
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
|
N/A
| |
| Kubernetes CNF |
Min CN-MGMT Memory
|
5G
|
5G
|
8G
|
8G
|
16G
|
16G
|
|
Min CN-NGFW Memory
|
2G
|
6.5G
|
16G
|
32G
|
48G
|
56G
| |
|
Recommended CN-MGMT Cores
|
2
|
2
|
2
|
4
|
8
|
12
| |
|
Max CN-NGFW Cores
|
2
|
4
|
8
|
16
|
31
|
47
| |
|
Disk
|
52Gi
|
52Gi
|
52Gi
|
52Gi
|
52Gi
|
52Gi
| |
|
DPDK Hugepage Size
|
1G
|
1G
|
2G
|
2G
|
4G
|
4G
|