Compatibility Matrix
CN-Series Firewalls
Table of Contents
CN-Series Firewalls
Learn about supported environments and required and compatible
files for CN-Series firewalls.
The CN-Series firewall is supported only
in certain environments and is compatible with or requires a specific
set of files to do so.
CN-Series Supported Environments
You can deploy the CN-Series firewall in the following environments.
Product | PAN-OS 10.1 | PAN-OS 10.2 | PAN-OS 11.0 | PAN-OS 11.1 | PAN-OS 11.2 |
---|---|---|---|---|---|
Container runtime
|
Docker
CRI-O
Containers
|
Docker
CRI-O
Containers
|
Docker
CRI-O
Containers
|
Docker
CRI-O
Containers
|
Docker
CRI-O
Containers
|
Kubernetes version
|
1.17 through 1.27
|
1.17 through 1.27
|
1.17 through 1.27
|
1.17 through 1.27
|
1.17 through 1.27
|
Cloud provider managed Kubernetes
|
|
|
|
|
|
Customer managed Kubernetes
|
On the public cloud or on-premises data center.
Make sure that the Kubernetes version, CNI Types, and Host VM OS
versions are included in this table.
VMware TKG+ version 1.1.2
|
On the public cloud or on-premises data center.
Make sure that the Kubernetes version, CNI Types, and Host VM OS
versions are included in this table.
VMware TKG+ version 1.1.2
|
On the public cloud or on-premises data center.
Make sure that the Kubernetes version, CNI Types, and Host VM OS
versions are included in this table.
VMware TKG+ version 1.1.2
|
On the public cloud or on-premises data center.
Make sure that the Kubernetes version, CNI Types, and Host VM OS
versions are included in this table.
VMware TKG+ version 1.1.2
|
On the public cloud or on-premises data center.
Make sure that the Kubernetes version, CNI Types, and Host VM OS
versions are included in this table.
VMware TKG+ version 1.1.2
|
Kubernetes Host VM
|
Operating System:
|
Operating System:
|
Operating System:
|
Operating System:
|
Operating System:
|
Linux Kernel Netfilter: Iptables
|
Linux kernel version:
|
Linux kernel version:
|
Linux kernel version:
|
Linux kernel version:
| |
Linux kernel version:
|
Linux kernel Netfilter: Iptables
|
Linux kernel Netfilter: Iptables
|
Linux kernel Netfilter: Iptables
|
Linux kernel Netfilter: Iptables
| |
CNI Plugins
|
CNI Spec 0.3 and later:
|
CNI Spec 0.3 and later:
|
CNI Spec 0.3 and later:
|
CNI Spec 0.3 and later:
|
CNI Spec 0.3 and later:
|
OpenShift
|
CN-Series as a DaemonSet:
4.2, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, and 4.13
|
The PAN-OS 10.2.4h3 is the minimum required version to
support 4.12 and above. |
|
|
|
CN-Series as a K8s Service:
(PAN-OS 10.1.2 and later)
4.7, 4.8, 4.9, 4.10, 4.11, 4.12, and 4.13
The PAN-OS 10.1.10h1 is the minimum required version to
support 4.12 and above. |
CN-Series Firewall Image and File Compatibility
Deploying the CN-Series firewall requires a number of different of
files. To help ensure a successful deployment, check the following information to
make sure you download the correct combination of files for CN-Series firewall
deployment.
PAN-OS Version
|
YAML Version
|
CNI Version
|
mgmt-init Version
|
---|---|---|---|
PAN-OS 11.2.x
PAN-OS 11.1.x
PAN-OS 11.0.x
PAN-OS 10.2.x
PAN-OS 10.1.x
|
3.0.x
|
3.0.x
|
3.0.x
|