Quickstart- CN-Series Firewall Deployment

Table of Contents

This topic outlines the steps to quickly bring up your CN-Series deployment.

Where Can I Use This?	What Do I Need?
CN-Series deployment	CN-Series 10.1.x or above Container Images Panorama running PAN-OS 10.1.x or above version Helm 3.6 or above version client for CN-Series deployment using Helm

Get started with CN-Series deployment using the following steps:

Log in to CSP Account and Activate Credits.
Create a Deployment Profile.
Install a Device Certificate on the CN-Series Firewall.
Install the Kubernetes Plugin and Set up Panorama for CN-Series.
Download the CN-Series deployment files from the Palo Alto Networks GitHub repository. Get the files from the Native-k8s folder for use with native Kubernetes on-premises or cloud deployments
Deploy the CN-Series with or without the HELM Charts repository.

It is recommended to deploy the CN-Series firewall using the HELM chart.
Configure Panorama to Secure a Kubernetes Deployment

You can choose to deploy your CN-Series firewall in following deployment modes:

Deploy the CN-Series Firewall as a Kubernetes Service (Recommended mode of Deployment)- The CN-Series firewall is deployed in a cluster deployment model. This mode of deployment uses auto scaling capabilities, improves utilization, reduces cost, and increases scale with native kubernetes based deployment models.
Deploy the CN-Series Firewall as a DaemonSet- The CN-Series firewall is deployed in a distributed deployment model. This mode of deployment is more suitable when you have a smaller number of nodes to secure per environment.
Deploy the CN-Series Firewall as a Kubernetes CNF- This mode of deployment protects both container and non-container workloads. You can deploy as a standalone layer 3 deployment.