The CN-Series firewalls are containerized firewalls designed to protect Kubernetes environments. They

offer several deployment methods to integrate with Kubernetes orchestration.

A . Terraform templates: Terraform is an Infrastructure-as-Code (IaC) tool that allows you to define and

provision infrastructure using declarative configuration files. 1 Palo Alto Networks provides Terraform

modules and examples to deploy CN-Series firewalls, enabling automated and repeatable deployments.

https://prathmeshh.hashnode.dev/day-62-terraform-and-docker

1. prathmeshh.hashnode.dev

https://prathmeshh.hashnode.dev/day-62-terraform-and-docker prathmeshh.hashnode.dev

B . Panorama plugin for Kubernetes: While Panorama is used to manage CN-Series firewalls centrally,

there isn't a direct "Panorama plugin for Kubernetes" for deploying the firewalls themselves.

Panorama is used for management after they're deployed using other methods.

C . YAML file: Kubernetes uses YAML files (manifests) to define the desired state of deployments,

including pods, services, and other resources. You can deploy CN-Series firewalls by creating YAML

files that define the necessary Kubernetes objects, such as Deployments, Services, and ConfigMaps. This

is a core method for Kubernetes deployments.

D . Helm charts: Helm is a package manager for Kubernetes. Helm charts package Kubernetes resources,

including YAML files, into reusable and shareable units. Palo Alto Networks provides Helm

charts for deploying CN-Series firewalls, simplifying the deployment process and managing updates. E .

Docker Swarm: Docker Swarm is a container orchestration tool, but CN-Series firewalls are specifically

designed for Kubernetes and are not deployed using Docker Swarm.

Reference:

The Palo Alto Networks documentation clearly outlines these deployment methods:

CN-Series Deployment Guide: This is the primary resource for deploying CN-Series firewalls. It provides

43/103

detailed instructions and examples for using Terraform, YAML files, and Helm charts. You can find this

on the Palo Alto Networks support portal by searching for "CN-Series Deployment Guide".