--- title: "Universal Firewall Integration" source: "https://www.tigera.io/features/firewall-integration/" --- Solution # Universal Firewall Integration Integrate and extend your existing firewall and zone-based architecture to Kubernetes. [Start Free](https://www.calicocloud.io/) [Get a Demo](https://www.tigera.io/demo/) ## Benefits Enable Kubernetes resources to securely access endpoints behind a firewall, secure non-Kubernetes workloads, and achieve compliance ![Kubernetes Security](https://www.tigera.io/app/uploads/2023/04/icon-kubernetes-security.svg) ### Securely Migrate to Kubernetes Seamlessly transition to Kubernetes-based applications while securing the environment ![Lock icon.](https://www.tigera.io/app/uploads/2023/06/icon-lock-security.svg) ### Enforce Zone-Based Security Extend existing operational workflows with legacy firewalls ![Layered security icon with shield and checkmark.](https://www.tigera.io/app/uploads/2023/06/icon-defense-in-depth.svg) ### Achieve Defense In Depth Retain legacy firewall investment and enforce defense-in-depth perimeter security ## Trusted by Customers Worldwide [![Orange logo](https://www.tigera.io/app/uploads/2022/03/logo-Orange.png)](http://www.orange.com/en) [![Essentra logo](https://www.tigera.io/app/uploads/2022/04/logo-Essentra.png)](https://www.essentra.com/en) [![Siemens Healthineers logo](https://www.tigera.io/app/uploads/2022/09/logo-siemens-healthineers.png)](https://www.siemens-healthineers.com/) [![RBC logo](https://www.tigera.io/app/uploads/2024/05/logo-RBC.png)](https://www.rbcroyalbank.com/) [![Marsh McLennan logo](https://www.tigera.io/app/uploads/2022/03/logo-Marsh-and-McLennan.png)](http://www.mmc.com/) [![Presidio logo](https://www.tigera.io/app/uploads/2024/05/logo-Presidio.png)](https://www.presidio.com/) [![Box logo](https://www.tigera.io/app/uploads/2022/03/logo-box.png)](http://www.box.com/home) [![Nvidia logo](https://www.tigera.io/app/uploads/2024/05/logo-Nvidia.png)](https://www.nvidia.com/) [![FM Global logo](https://www.tigera.io/app/uploads/2023/03/logo-FM-Global.png)](https://www.fmglobal.com/) [![Upwork logo](https://www.tigera.io/app/uploads/2022/12/logo-upwork.png)](https://www.upwork.com/) [![GoDaddy logo](https://www.tigera.io/app/uploads/2023/03/logo-GoDaddy.png)](https://www.godaddy.com/) [![Arvato Systems logo](https://www.tigera.io/app/uploads/2025/01/logo-Arvato-systems.png)](https://www.arvato-systems.com/) [![Aldagi logo](https://www.tigera.io/app/uploads/2022/10/logo-aldagi.png)](https://aldagi.ge/en/) [![NBC Universal logo](https://www.tigera.io/app/uploads/2022/09/logo-NBC-Universal.png)](https://www.nbcuniversal.com/) [![Chipotle logo](https://www.tigera.io/app/uploads/2024/05/logo-Chipotle.png)](https://www.chipotle.com/) [![Meridianlink logo](https://www.tigera.io/app/uploads/2022/03/logo-Meridianlink.png)](http://www.meridianlink.com/) [![Mulligan Funding logo](https://www.tigera.io/app/uploads/2022/03/logo-MulliganFunding.png)](https://www.mulliganfunding.com/) [![HanseMerkur logo](https://www.tigera.io/app/uploads/2022/03/logo-HanseMerkur.png)](http://www.hmrv.de/en) [![Fiserv logo](https://www.tigera.io/app/uploads/2022/12/logo-fiserv.png)](https://www.fiserv.com/) [![Berenberg logo](https://www.tigera.io/app/uploads/2022/03/logo-BERENBERG.png)](http://www.berenberg.de/en/) [![eHealth logo](https://www.tigera.io/app/uploads/2023/10/logo-eHealth.png)](https://www.tigera.io/ehealth-case-study/) [![Coinmetrics logo](https://www.tigera.io/app/uploads/2022/03/logo-coinmetrics.png)](http://coinmetrics.io/) ## Solution Architecture ![Universal Firewall Integration diagram](https://www.tigera.io/app/uploads/2023/06/Universal-Firewall-Integration-diagram-1200x380-1.png) ![Zone Based Security Diagram](https://www.tigera.io/app/uploads/2023/06/Zone-Based-Security.png) ### Zone-Based Security in Kubernetes Bring your existing zone-based architecture to Kubernetes clusters and enforce the same firewall rules by translating them into Kubernetes security policies using Calico. Explicitly allow-list which microservices are permitted to traverse zones and achieve compliance. ![Firewall Manager Integration](https://www.tigera.io/app/uploads/2020/07/Firewall-Manager-Integration.png) ### Extend Firewall Integration Integrate with perimeter firewalls without exposing large IP ranges from Kubernetes clusters. Restrict traffic from microservices to destinations outside the cluster by authorizing granular egress access controls for applications in Kubernetes. ## Available on Microsoft Azure, AWS, and Google Marketplace Get started right away on Azure, AWS, or Google Cloud—every Calico component you need to get up and running is ready to go. [On Azure](https://azuremarketplace.microsoft.com/en-ca/marketplace/apps/tigerainc1620235671643.calicocloudsaas?tab=overview) [On AWS](https://aws.amazon.com/marketplace/pp/prodview-pq3tgvtlj3wce) [On Google Cloud](https://console.cloud.google.com/marketplace/product/tigera-public/calico-cloud?inv=1&invt=Ab27_g&project=tigera-public) ![Microsoft Azure, AWS, and Google Cloud logos.](https://www.tigera.io/app/uploads/2025/07/Solution-cloud-marketplace-AWS-Azure-03.svg) ## Customer Testimonial Here’s what our customers are saying about us ![Quotation marks](https://www.tigera.io/app/themes/tigera2021/dist/img/quotes-sign.svg) Thanks to Calico Enterprise, application launch time was reduced from several days to only 5 minutes. The methods and mechanisms for writing policies and rules on the firewall were also reduced. It resulted in a much more flexible and secure environment. Vasili Grigolaia Vice President of Engineering, Aldagi ![Aldagi Logo](https://www.tigera.io/app/uploads/2022/10/logo-aldagi.png) [Read More](https://www.tigera.io/aldagi-case-study/) [Read Customer Stories](https://www.tigera.io/customer-stories/) ## Featured Resources Developer-created resources to help you secure your Kubernetes deployment ![Extend Firewalls to Kubernetes​](https://www.tigera.io/app/uploads/2023/05/Calico-Enterprise-Tigera-1200x628-1.png) Documentation ### Extend Firewalls to Kubernetes​ Most teams don’t have time to take on new tools—learn how to integrate Kubernetes and existing firewalls. [Learn More](https://docs.tigera.io/calico-enterprise/latest/about/) ![How Calico Enables Fortinet Firewalls to Secure Kubernetes Workloads](https://www.tigera.io/app/uploads/2023/05/Calico-Fortinet.png) Blog ### How Calico Enables Fortinet Firewalls to Secure Kubernetes Workloads Make your fortigate firewall work with Kubernetes. [Read More](https://www.tigera.io/blog/make-your-fortigate-firewalls-work-with-kubernetes-how-calico-enables-fortinet-firewalls-to-secure-kubernetes-workloads/) ![Fortinet NGFW with Calico](https://www.tigera.io/app/uploads/2020/03/wbr-20-03-17-1200x628-v3.png) Webinar ### Fortinet NGFW with Calico Leverage the Fortinet and Calico integration to bring visibility and security to containers and Kubernetes. [Learn More](https://www.tigera.io/blog/how-fortinet-and-tigera-protect-kubernetes-in-the-enterprise/) [All Resources](https://www.tigera.io/resources/) ![Calico Logo](https://www.tigera.io/app/uploads/2026/01/Calico-logo-2026-black-text.svg) ## Ready to Get Started? Get started for free or request a demo to see Calico in action