The two features of CN-Series firewalls that protect east-west traffic between pods in different trust
zones are:
Intrusion prevention system
Layer 7 visibility
East-west traffic is the traffic that flows between applications or workloads within a network or a
cloud environment. Pods are the smallest units of deployment in Kubernetes, consisting of one or
more containers that share resources and network space. Trust zones are segments of the network or
the cloud environment that have different levels of security requirements or policies based on data
sensitivity, user identity, device type, or application function. CN-Series firewalls are containerized
firewalls that integrate with Kubernetes and provide visibility and control over container traffic.
Intrusion prevention system is a feature of CN-Series firewalls that protects east-west traffic between
pods in different trust zones by detecting and blocking known exploits and vulnerabilities using
signature-based and behavior-based methods. Layer 7 visibility is a feature of CN-Series firewalls that
protects east-west traffic between pods in different trust zones by identifying and classifying
applications and protocols based on their content and characteristics, regardless of port, encryption,
or evasion techniques. Communication with Panorama and external load balancer are not features of
CN-Series firewalls that protect east-west traffic between pods in different trust zones, but they are
related features that can enhance management and performance. Reference: Palo Alto Networks
Certified Software Firewall Engineer (PCSFE), [CN-Series Concepts], [CN-Series Deployment Guide for
Native K8], [Intrusion Prevention System Overview], [App-ID Overview]
