The Palo Alto Networks CN-Series Container Firewall is the best-in-class next generation firewall purpose built to secure the Kubernetes environment from network based attacks.

The CN-Series firewall enables you to

1. Gain Layer-7 traffic visibility and control within the cluster
2. Stop lateral movement of threats
3. Prevent known and unknown inbound attacks
4. Apply egress filtering to prevent data exfiltration and unwanted outbound connections
5. Dynamically scale security without compromising DevOps agility.
6. Ensure a frictionless CI/CD pipeline deployment.
7. Unify management across all your firewalls using Panorama.

Deploy CN-Series as-a-Kubernetes service and manage the fleet of firewalls from Panorama, alongside our hardware and VM-Series NGFW appliances to ensure consistent security posture everywhere. This subscription also includes industry-leading Threat Prevention, WildFire, URL Filtering, and DNS Security subscriptions that provide best-in-class runtime network security for East-West, Outbound and Inbound traffic.

Get started today with three simple steps (Please skip to step #3 if you already have a Panorama):

1. Deploy Panorama on Amazon EC2: https://aws.amazon.com/marketplace/pp/prodview-cjgnbhu6bozno 
2. Please email us at cn-series-aws-marketplace@paloaltonetworks.com  to request a license for your Panorama. Also include: Full Name, Company Email, Company Name, Purchase Order Number, AWS Account Name and Account Id.. Follow these steps to register your Panorama: https://docs.paloaltonetworks.com/panorama/10-1/panorama-admin/set-up-panorama/register-panorama-and-install-licenses/activateretrieve-a-firewall-management-license-on-the-panorama-virtual-appliance.html 
3. Now that Panorama is licensed, please follow these steps to install CN-series on supported environments (EKS or RedHat OpenShift):