- Explain Application Layer inspection for Strata and SASE products
- Explain the functionality of slow path and fast path for packet inspection
- Explain the use of decryption on Strata and SASE products
- Explain the application of network hardening methods for enhanced security on Strata and SASE products
Palo Alto Networks Certification Training Course
Palo Alto Networks Certified Network Security Professional Certification Training Course
We'll get you ready for the Palo Alto Networks Certified Network Security Professional exam, which covers the full Palo Alto Networks network security portfolio and is one of the paths Palo Alto Networks recommends after the PCNSE retirement.
Course focus: Network security fundamentals, NGFW and SASE functionality, platform services and tools, maintenance and configuration, infrastructure management and Cloud-Delivered Security Services, mapped to the official blueprint.
Course Overview
What the Network Security Professional course covers and who it's for.
Palo Alto Networks retired PCNSE on July 31, 2025. Its recommended next steps include Network Security Professional, Network Security Analyst, NGFW Engineer, SSE Engineer and SD-WAN Engineer. For most PCNSE candidates, Network Security Professional is the place to start.
Per Palo Alto Networks, the exam validates knowledge of all products and services in the network security solution plus entry-level configuration, maintenance and deployment. We follow the six domains in the official datasheet. Platform solutions, services and tools is the heaviest at 30%, so it gets the most time.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of Palo Alto Networks, and this isn't official Palo Alto Networks training. Palo Alto Networks sets exam content, fees and policies, so check paloaltonetworks.com before you book.
Course Objectives
Get ready for Network Security Professional the way the exam is built.
01
Cover the Whole Blueprint
Work through all 6 domains in the official Network Security Professional datasheet, weighted the way the exam weights them.
02
Go Deep on Platform Solutions, Services, and Tools
Platform Solutions, Services, and Tools is 30% of the exam score per Palo Alto Networks, so it gets the most class time.
03
Practice in a Lab
Hands-on lab work on the tasks the Network Security Professional blueprint lists, not just slides.
04
Be Ready for Test Day
The exam is in person at a Pearson VUE test center with multiple choice, matching and ordering items. We practice all three.
Who Should Attend
- Network and security staff who install, run or administer Palo Alto Networks NGFWs.
- Admins working with Cloud-Delivered Security Services subscriptions or SASE.
- Former PCNSE and PCNSA candidates whose exams were retired.
- Engineers planning to move on to a Specialist exam.
Prerequisites
- Palo Alto Networks doesn't list a required prerequisite certification, and we don't have enrollment prerequisites either.
- You'll do better with working knowledge of TCP/IP, routing and basic firewall concepts. Cybersecurity Practitioner is a good stepping stone.
Pathway Map
The Network Security Professional course in 6 modules.
Each module is one domain from the official datasheet, with its exam weight.
Course Content
- Explain the function of Cloud NGFWs, PA-Series, CN-Series, and VM-Series firewalls
- Explain the function of Prisma SD-WAN
- Explain the function of Prisma Access
- Explain the functionality of Panorama and Strata Cloud Manager (SCM) for managing Strata and SASE solutions
- Explain the security efficacy of Palo Alto Networks NGFW and Prisma SASE products
- Explain the functionality of Cloud-Delivered Security Services (CDSS) components
- Explain the alignment of AIOps to Palo Alto Networks best practices
- Explain how Next-Generation Trust Security (NGTS) supports identity governance, trust relationships, and adaptive security decisions across the enterprise platform
- Explain the configuration and maintenance of Palo Alto Networks hardware firewalls, VM-Series firewalls, CN-Series firewalls, and Cloud NGFWs
- Explain the configuration and maintenance of Prisma Access
- Explain the function of Security policies, profiles, and updates in the configuration and maintenance of CDSS
- Explain the function of Security policies, Device-IDs, and monitoring and logging in the configuration and maintenance of IoT security
- Explain the function of data encryption, access control, and monitoring and logging in the configuration and maintenance of Enterprise DLP and Enterprise SaaS Security
- Explain the function of supported products, new device addition, reporting, and configuration management in SCM and Panorama in network security environments
- Explain the configuration and maintenance of network security for on-premises, cloud, and hybrid networks
- Identify and describe the components used to maintain connectivity and security of remote users
Course Features
How we teach Network Security Professional.
Instructor-Led Classes
Live instruction with time for questions, so you aren't figuring out the hard parts alone.
Hands-On Labs
Lab work tied to the tasks in the Network Security Professional blueprint.
Blueprint Mapping
Every module maps to a domain in the official Network Security Professional datasheet.
Exam Strategy
Practice with multiple choice, matching and ordering questions, plus test center tips.
Certification Exam
About the Network Security Professional exam.
Network Security Professional Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for Network Security Professional the same way.
Per Palo Alto Networks, Network Security Professional is a Professional level exam priced at $200 USD, and taxes may apply. Since August 1, 2025, Palo Alto Networks exams are delivered in person at Pearson VUE test centers only. Exams are in English, with multiple choice, matching and ordering questions.
The certification is valid for two years and you renew by retaking the exam. If you fail, the waits before retakes are 15, 30 and then 90 days. Full details are on the official Network Security Professional page.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of Palo Alto Networks, and this isn't official Palo Alto Networks training. Palo Alto Networks sets exam content, fees and policies, so check paloaltonetworks.com before you book.
Exam Blueprint
The full Network Security Professional blueprint.
We map our lessons to the official Network Security Professional datasheet. Here is that blueprint, all 6 domains and 22 objectives, so you can see exactly what is in scope.
Domain 1: Network Security Fundamentals (17%)
1.1 Explain Application Layer inspection for Strata and SASE products
1.2 Explain the functionality of slow path and fast path for packet inspection
1.3 Explain the use of decryption on Strata and SASE products (for example SSL Forward Proxy, SSL Inbound Inspection, SSH Proxy, no decrypt)
1.4 Explain the application of network hardening methods for enhanced security on Strata and SASE products (for example Content-ID, Zero Trust, User-ID, Device-ID, Zones)
Domain 2: NGFW and SASE Solution Functionality (13%)
2.1 Explain the function of Cloud NGFWs, PA-Series, CN-Series, and VM-Series firewalls (for example perimeter and core security, zone security and segmentation, high availability [HA], security and NAT policy implementation, monitoring and logging)
2.2 Explain the function of Prisma SD-WAN (for example WAN optimization, path and NAT policies, Zone-based firewalls, monitoring and logging)
2.3 Explain the function of Prisma Access (for example remote user configuration, remote network configuration, public and private application access, security and NAT policy implementation, monitoring and logging)
2.4 Explain the functionality of Panorama and Strata Cloud Manager (SCM) for managing Strata and SASE solutions
Domain 3: Platform Solutions, Services, and Tools (30%)
3.1 Explain the security efficacy of Palo Alto Networks NGFW and Prisma SASE products (for example security and NAT policy, User-ID, App-ID, decryption, monitoring and logging)
3.2 Explain the functionality of Cloud-Delivered Security Services (CDSS) components
- Internet of things (IoT) security
- Enterprise Data Loss Prevention (DLP)
- SaaS Security
- PAN-OS SD-WAN
- Premium GlobalProtect
- Advanced WildFire, Advanced Threat Prevention, Advanced URL Filtering, and Advanced DNS
3.3 Explain the alignment of AIOps to Palo Alto Networks best practices (for example dashboards, Best Practice Assessment [BPA], administration)
3.4 Explain how Next-Generation Trust Security (NGTS) supports identity governance, trust relationships, and adaptive security decisions across the enterprise platform
3.5 Identify and describe quantum security risks (for example harvest now, decrypt later attacks) and Palo Alto Networks platform capabilities to address them (for example post-quantum readiness, hybrid cryptography)
3.6 Identify and describe AI-related security risks and mitigation techniques (for example AI use, sensitive data exposure, AI application access, AI-enabled threats) and explain how Palo Alto Networks platform capabilities can help discover, monitor, control, and secure them
Domain 4: NGFW and SASE Solution Maintenance and Configuration (10%)
4.1 Explain the configuration and maintenance of Palo Alto Networks hardware firewalls, VM-Series firewalls, CN-Series firewalls, and Cloud NGFWs (for example Security policies, profiles, updates, upgrades)
4.2 Explain the configuration and maintenance of Prisma Access (for example Security policies, profiles, updates, upgrades, monitoring and logging)
Domain 5: Infrastructure Management and CDSS (17%)
5.1 Explain the function of Security policies, profiles, and updates in the configuration and maintenance of CDSS
5.2 Explain the function of Security policies, Device-IDs, and monitoring and logging in the configuration and maintenance of IoT security
5.3 Explain the function of data encryption, access control, and monitoring and logging in the configuration and maintenance of Enterprise DLP and Enterprise SaaS Security
5.4 Explain the function of supported products, new device addition, reporting, and configuration management in SCM and Panorama in network security environments
Domain 6: Connectivity and Security (13%)
6.1 Explain the configuration and maintenance of network security for on-premises, cloud, and hybrid networks (for example network segmentation, policies, monitoring and logging, certificates)
6.2 Identify and describe the components used to maintain connectivity and security of remote users (for example remote access solutions, network segmentation, Security policy tuning, monitoring and logging, certificates)
Before You Start
Who should take Network Security Professional.
Here is who Palo Alto Networks says the Network Security Professional exam is for and what it expects you to bring, taken from the official datasheet.
Who Palo Alto Networks wrote this exam for
This exam is designed for individuals with the following job roles:
- Networking and Security professionals responsible for installing / deploying, operating, or administering the Palo Alto Networks suite of
- Next-generation firewall (NGFW) products
- Cloud-Delivered Security Services (CDSS) subscriptions
- Next-Generation Trust Security (NGTS) platform components
- Secure Access Service Edge (SASE) products, including Prisma Access, Enterprise Browser, and Prisma SD-WAN
- Management products, including Strata Cloud Manager (SCM)
- Individuals responsible for establishing and maintaining the connectivity and security of
- Data centers (that is on-premises, public cloud, private cloud)
- Branches and campuses
- Remote users (that is client-based, proxy-based, Enterprise Browser, RBI)
- Internet-connected devices (that is internet of things (IoT), internet of medical things (IoMT), operational technology)
- Data handling (that is SaaS applications, data loss prevention (DLP), cloud access)
Knowledge, skills and abilities
- Basic knowledge of securing networks of all sizes
- Configuration of Palo Alto Networks Strata and Prisma SASE products for security outcomes
- Basic knowledge of options for managing Palo Alto Networks solutions (for example Panorama, SCM)
- Basic knowledge of configuring relevant Palo Alto Networks products (for example hardware, VM-Series firewalls, CN-Series firewalls, Cloud NGFWs, Prisma Access, Prisma SD-WAN, CDSS)
- Basic knowledge NGTS products and solutions
- Basic knowledge of best practices for Strata and SASE products
Study Plan
How we approach Network Security Professional prep.
The weights tell you where to spend your hours. Platform Solutions, Services, and Tools leads at 30%.
Keep the official datasheet open while you study and tick off each objective as you finish it. That is the simplest way to find your gaps before exam day.
Our course follows the same blueprint, with on demand lessons you can pause and replay, and our students pass at a 98.8% rate across Accumentum courses.
Exam Policies
The rules around Network Security Professional.
Palo Alto Networks certifications, Network Security Professional included, are valid for two years from the day you pass. To stay active you recertify by passing the exam again.
Passing a higher level exam in the same track automatically extends your active lower level certifications in that track by two years.
If you don't pass, you get a results report broken down by domain. Palo Alto Networks requires a 15 day wait before a second attempt, 30 days before a third and 90 days before any attempt after that. After a pass you can't sit the same exam again for 18 months.
Exams are delivered in English through Pearson VUE, and candidates testing in non English speaking countries get a 30 minute time extension by default. Your badge and certificate come through Credly.
Career Outcomes
Where Network Security Professional can take you.
Network Security Professional fits network and security engineers, firewall administrators and support staff who work with Strata NGFWs and Prisma SASE. It is the broad network security exam in the current Palo Alto Networks lineup.
For a sense of pay, BLS puts the May 2025 median annual wage for information security analysts at $129,180. BLS also projects employment of information security analysts to grow 21 percent from 2025 to 2035, much faster than the average for all occupations. A median is the midpoint, so half earned more and half earned less, and your own pay will depend on location, experience and employer. Source: BLS Occupational Outlook Handbook.
Funding
Ways to pay for Network Security Professional training.
Our funding page lays out every way to pay for training, and PathPay lists the courses that qualify for a monthly plan.
Veterans can look at VR&E benefits for career training, and our Veteran Skill Forge programs bundle several courses into one path. Questions about your situation? Contact us and we'll talk it through.
Frequently Asked Questions
Common questions about our Network Security Professional course.
Palo Alto Networks Certified Network Security Professional is a Professional level certification from Palo Alto Networks. Details are on the official certification page at https://www.paloaltonetworks.com/services/education/palo-alto-networks-netsec-professional.
No. We're an independent training provider and we aren't a Palo Alto Networks partner. Our course follows the public exam blueprint in the official datasheet. Palo Alto Networks offers its own learning paths at learn.paloaltonetworks.com.
Palo Alto Networks retired PCNSE on July 31, 2025. Its recommended next steps include Network Security Professional, Network Security Analyst, NGFW Engineer, SSE Engineer and SD-WAN Engineer. For most PCNSE candidates, Network Security Professional is the place to start.
Palo Alto Networks lists Professional exams at $200 USD, and taxes may apply. Vouchers are sold through Pearson VUE and expire 12 months after purchase. Check the current price before you buy.
No. Since August 1, 2025, Palo Alto Networks certification exams are delivered in person at Pearson VUE test centers only.
Two years from the date you pass. You renew by retaking the exam, and passing a higher level exam in the same track renews your active lower level certifications.
Palo Alto Networks doesn't list a required prerequisite certification, and we don't have enrollment prerequisites either. You'll do better with working knowledge of TCP/IP, routing and basic firewall concepts. Cybersecurity Practitioner is a good stepping stone.
Instructor-led, with hands-on labs and practice questions. Ask us about upcoming class dates.
Use the registration page linked below, or email info@accumentum.net and we'll follow up with dates and next steps.
6. Per the official datasheet they are Network Security Fundamentals (17%), NGFW and SASE Solution Functionality (13%), Platform Solutions, Services, and Tools (30%), NGFW and SASE Solution Maintenance and Configuration (10%), Infrastructure Management and CDSS (17%), Connectivity and Security (13%).
Platform Solutions, Services, and Tools at 30%, per the Palo Alto Networks datasheet.
Palo Alto Networks lists networking and Security professionals responsible for installing / deploying, operating, or administering the Palo Alto Networks suite of, next-generation firewall (NGFW) products, cloud-Delivered Security Services (CDSS) subscriptions, next-Generation Trust Security (NGTS) platform components, secure Access Service Edge (SASE) products, including Prisma Access, Enterprise Browser, and Prisma SD-WAN, management products, including Strata Cloud Manager (SCM), individuals responsible for establishing and maintaining the connectivity and security of, data centers (that is on-premises, public cloud, private cloud), branches and campuses, remote users (that is client-based, proxy-based, Enterprise Browser, RBI), internet-connected devices (that is internet of things (IoT), internet of medical things (IoMT), operational technology) and data handling (that is SaaS applications, data loss prevention (DLP), cloud access).
Palo Alto Networks requires a 15 day wait after a first failed attempt, 30 days after a second and 90 days after a third. Once you pass, you can't retake the same exam for 18 months.
Our PathPay page lists the courses that qualify for a monthly plan. For anything else, contact us and we'll go over options.
Enrollment
Enroll in Network Security Professional training with Accumentum.
Enroll in our Network Security Professional course to get ready for the Palo Alto Networks Certified Network Security Professional exam with instructor-led classes and hands-on labs.
For dates and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on Network Security Professional?
Tell us your target date and we'll help you plan the path.