CyberIndexBeta

Product

Containerised next-generation firewall for Kubernetes environments. CN-Series firewalls can inspect all outbound traffic originating from a containerized application – and halt inadvertent access of suspect websites and command-and-control servers. Securing Red Hat clusters with CN-Series firewall to implement Zero Trust for containerized apps. Block suspicious activity and prevent exfiltration with full outbound traffic content inspection, including encrypted SSL traffic and traffic originating from containerized applications. It is available as a container image.

Current Version
11.2.0
Market
Enterprise
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-20

Vendor

Palo Alto Networks was founded in 2005 by Nir Zuk, who had written the first stateful inspection engine at Check Point, and built the next-generation firewall — an appliance that identifies the application in a flow rather than judging it by port number. That product made the company, and it is now one of the largest security firms in the world, listed on Nasdaq, with around 16,000 employees and over 70,000 customers. Its range is organised under three names: Strata for network security and the PA-Series firewalls, Prisma for cloud and SASE, and Cortex for security operations — Cortex XDR for detection and response, Cortex XSOAR for automation, Cortex Xpanse for attack-surface discovery and Cortex XSIAM as the platform it is steering customers toward. Unit 42 is its threat intelligence and incident response arm. What appears in this index is the endpoint and firewall end of that portfolio. Its endpoint agent is sold as part of a platform rather than on its own, which is worth knowing when comparing its price and its test results with a standalone product's. Vendor page →

Country
United States
Headquarters
Santa Clara, United States
Year Established
2005
Customers
70K organisations
Users
100M users
Revenue
$11.5B (2026)

Platforms

Containernative

Target Market

Enterprise primary

Capabilities

Stateful Inspectionkeynative
Intrusion Prevention (IPS)keyoptional module
Intrusion Detection (IDS)Not known
SSL/TLS Inspectionkeynative
VPN GatewaykeyNot known
SD-WANnot supported
Application Controlkeynative
High Availabilitynative
Deep Packet Inspectionnative
Central Management Consolenative

2 of 10 not yet known — not recorded, which is not the same as not supported.

Specifications

Firewall TypeNetwork (NGFW / UTM)

4 other specifications for this category not yet known.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 11.2.0Kubernetes

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-20New versionNew version: 11.2.0 (Kubernetes)evidence
  • 2026-10-13Capability addedSD-WAN: not supportedevidence
  • 2026-10-08Capability addedIntrusion Prevention (IPS): optional moduleevidence
  • 2026-10-08Capability addedSSL/TLS Inspection: built inevidence
  • 2026-10-08Capability addedDeep Packet Inspection: built inevidence
  • 2026-10-08Capability addedApplication Control: built inevidence
  • 2026-10-07Capability addedCentral Management Console: built inevidence
  • 2026-10-07Capability addedHigh Availability: built inevidence
  • 2026-10-07Capability addedStateful Inspection: built inevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-20New versionNew version: PAN-OS (Container)evidence
  • 2026-09-20Platform addedRuns on Containerevidence
  • 2026-09-19Product updatedSold to: Enterpriseevidence
  • 2026-09-19Product createdNew product, listed in Network Firewallevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.