
CN-SERIES CONTAINER NGFW
Protect Kubernetes Containers
Keep cloud native applications nimble and secure with the industry’s first ML-Powered Next-Generation Firewall (NGFW) built for Kubernetes® environments.
Container traffic is growing by leaps and bounds – and it’s probably part of your network infrastructure. Or will be soon. Our CN-Series containerized firewalls prevent network-based threats in Kubernetes environments.
Block suspicious activity and prevent exfiltration with full outbound traffic content inspection, including encrypted SSL traffic and traffic originating from containerized applications. CN-Series firewalls can inspect all outbound traffic originating from a containerized application – and halt inadvertent access of suspect websites and command-and-control servers.
Enforce Zero Trust with Threat Prevention. Discover Layer 7 visibility and control and protect east-west traffic between pods in different trust zones (such as two namespaces) or between pods and other workload types.
Defend against malware delivery aimed at container exploits and vulnerabilities, including variants not yet seen in the wild, through custom-built signatures based on content instead of hashes.
INTEGRATED INTO KUBERNETES
APPLICATION VISIBILITY
COMMAND FOR DEPLOYMENT
The CN-Series is a containerized next-generation firewall purpose-built to secure Kubernetes environments against modern application attacks.
It provides full Layer-7 visibility, application-level segmentation, DNS Security, and protection from advanced threats in Kubernetes.
It can be deployed using DevOps-friendly tools like Helm charts and Terraform templates, as a DaemonSet or as a Kubernetes Service.
Yes, CN-Series firewalls can be managed from Panorama, giving network security teams a single pane of glass for their overall security posture.
It supports public cloud and on-premises data center environments, including managed Kubernetes services like GKE, EKS, and AKS.
Contact our team of NGFW experts today. We want to meet with you to help keep your network secure.





