- Identify and describe Prisma Access architecture and components
- Explain Prisma Access routing
- Configure and deploy Prisma Access service infrastructure
- Configure and deploy Prisma Access for mobile users
Palo Alto Networks Certification Training Course
Palo Alto Networks Certified Security Service Edge Engineer Certification Training Course
We'll get you ready for the Palo Alto Networks Certified Security Service Edge Engineer exam, the Specialist credential for Prisma Access and Prisma Browser.
Course focus: Prisma Access planning and deployment, Prisma Access services, Prisma Browser, administration and operation, and troubleshooting, mapped to the official SSE Engineer blueprint.
Course Overview
What the Security Service Edge Engineer course covers and who it's for.
Per Palo Alto Networks, SSE Engineer validates the skills engineers need to plan, deploy, configure, manage and troubleshoot security service edge environments. It's one of the recommended paths after the PCNSE retirement.
We follow the five domains in the official datasheet. Planning and deployment, services and Prisma Browser are 22% each, so we split lab time evenly across them, then cover operations with Panorama and Strata Cloud Manager and troubleshooting.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of Palo Alto Networks, and this isn't official Palo Alto Networks training. Palo Alto Networks sets exam content, fees and policies, so check paloaltonetworks.com before you book.
Course Objectives
Get ready for Security Service Edge Engineer the way the exam is built.
01
Cover the Whole Blueprint
Work through all 5 domains in the official Security Service Edge Engineer datasheet, weighted the way the exam weights them.
02
Go Deep on Prisma Access Planning and Deployment
Prisma Access Planning and Deployment is 22% of the exam score per Palo Alto Networks, so it gets the most class time.
03
Practice in a Lab
Hands-on lab work on the tasks the Security Service Edge Engineer blueprint lists, not just slides.
04
Be Ready for Test Day
The exam is in person at a Pearson VUE test center with multiple choice, matching and ordering items. We practice all three.
Who Should Attend
- SSE and Prisma Access engineers.
- Network and security engineers.
- SSE professional services consultants.
- SSE technical support engineers.
Prerequisites
- Palo Alto Networks recommends 3 years in network security and 1 to 2 years with Prisma Access.
- Recommended certifications are Cybersecurity Practitioner and Network Security Professional. We don't have enrollment prerequisites.
Pathway Map
The Security Service Edge Engineer course in 5 modules.
Each module is one domain from the official datasheet, with its exam weight.
Course Content
- Configure and implement advanced Prisma Access features and services
- Configure and implement Prisma Access data security services
- Configure and implement profiles and policies for Prisma Access
- Configure and implement user-based policies within Prisma Access
- Configure and deploy Prisma Browser
- Configure and implement Prisma Browser policies and profiles
- Manage and operate Prisma Access with Panorama
- Manage and operate Prisma Access with Strata Cloud Manager (SCM)
- Configure and deploy Strata Logging Service
- Maintain security posture in Prisma Access
- Monitor and troubleshoot Prisma Access connectivity
- Troubleshoot Prisma Access traffic enforcement issues
Course Features
How we teach Security Service Edge Engineer.
Instructor-Led Classes
Live instruction with time for questions, so you aren't figuring out the hard parts alone.
Hands-On Labs
Lab work tied to the tasks in the Security Service Edge Engineer blueprint.
Blueprint Mapping
Every module maps to a domain in the official Security Service Edge Engineer datasheet.
Exam Strategy
Practice with multiple choice, matching and ordering questions, plus test center tips.
Certification Exam
About the Security Service Edge Engineer exam.
Security Service Edge Engineer Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for Security Service Edge Engineer the same way.
Per Palo Alto Networks, Security Service Edge Engineer is a Specialist level exam priced at $250 USD, and taxes may apply. Since August 1, 2025, Palo Alto Networks exams are delivered in person at Pearson VUE test centers only. Exams are in English, with multiple choice, matching and ordering questions.
The certification is valid for two years and you renew by retaking the exam. If you fail, the waits before retakes are 15, 30 and then 90 days. Full details are on the official Security Service Edge Engineer page.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of Palo Alto Networks, and this isn't official Palo Alto Networks training. Palo Alto Networks sets exam content, fees and policies, so check paloaltonetworks.com before you book.
Exam Blueprint
Every Security Service Edge Engineer objective, domain by domain.
This is the complete Security Service Edge Engineer blueprint from the official datasheet. 5 domains, 19 objectives, and every sub topic Palo Alto Networks calls out.
Domain 1: Prisma Access Planning and Deployment (22%)
1.1 Identify and describe Prisma Access architecture and components
- Security processing nodes
- IP addressing
- Compute locations
- DNS
1.2 Explain Prisma Access routing
- Routing preference
- Backbone routing
- Traffic steering
1.3 Configure and deploy Prisma Access service infrastructure
1.4 Configure and deploy Prisma Access for mobile users
- VPN client
- Explicit proxy
1.5 Configure, implement, and deploy Prisma Access for remote networks
1.6 Configure and manage private application access
- Service connections
- Colo-Connect
- Zero Trust Network Access (ZTNA) Connector
1.7 Configure and implement identity authentication within Prisma Access
- Cloud Identity Engine
- SAML, Kerberos, Certificate, LDAP, RADIUS
Domain 2: Prisma Access Services (22%)
2.1 Configure and implement advanced Prisma Access features and services
- App Acceleration
- Traffic replication
- IoT Security
- Remote Browser Isolation (RBI)
2.2 Configure and implement Prisma Access data security services
- SaaS Security
- Enterprise DLP
- AI Access Security
2.3 Configure and implement profiles and policies for Prisma Access
- Security
- Decryption
- QoS
2.4 Configure and implement user-based policies within Prisma Access
- Cloud Identity Engine
- User-ID
Domain 3: Prisma Browser (22%)
3.1 Configure and deploy Prisma Browser
- Public applications
- Private applications
- Prisma Browser Extension
3.2 Configure and implement Prisma Browser policies and profiles
- Security
- Decryption
- Data loss prevention (DLP)
Domain 4: Prisma Access Administration and Operation (16%)
4.1 Manage and operate Prisma Access with Panorama
- Tenant management and multitenancy
- User- and role-based access control
- Configuration management and version control
- Reporting and log management
- Release and upgrades
4.2 Manage and operate Prisma Access with Strata Cloud Manager (SCM)
- Tenant management and multitenancy
- User- and role-based access control
- Configuration management and version control
- Reporting and log management
- Copilot
4.3 Configure and deploy Strata Logging Service
- SCM and Panorama
- Log forwarding
4.4 Maintain security posture in Prisma Access
- Best Practice Assessment (BPA)
- Compliance
Domain 5: Prisma Access Troubleshooting (18%)
5.1 Monitor and troubleshoot Prisma Access connectivity
- Mobile users
- Remote networks
- Service connections
- ZTNA connectors
- Performance and latency
5.2 Troubleshoot Prisma Access traffic enforcement issues
- Security policy
- HIP enforcement
- User-ID mismatch
- Split tunneling
Before You Start
Who should take Security Service Edge Engineer.
Here is who Palo Alto Networks says the Security Service Edge Engineer exam is for and what it expects you to bring, taken from the official datasheet.
Who Palo Alto Networks wrote this exam for
This exam is designed for individuals with the following job roles:
- SSE engineers
- Prisma Access engineers
- Security engineers
- Network engineers
- SSE professional services consultants
- SSE technical support engineers
Knowledge, skills and abilities
- Working knowledge of network security
- Working knowledge of TCP/IP and how traffic is directed within a network, including routing protocols
- Working knowledge of networking infrastructure, protocols, and topology
- Basic understanding of endpoint OS fundamentals and security hardening methods
- Working knowledge of SSE and security automation technology
- Basic knowledge of current and emergent trends in information security
- Ability to use security models / architectures (for example Defense in Depth, Zero Trust)
- Engineering-level knowledge of Prisma Access
- Basic knowledge of programming and scripting languages (for example Python, Powershell, SQL)
Recommended background
Recommended work experience: 3 years in a network security-related field, 1 to 2 years with Palo Alto Networks Prisma Access solutions.
Recommended certifications first: Palo Alto Networks Certified Cybersecurity Practitioner, Palo Alto Networks Certified Network Security Professional.
Study Plan
How we approach Security Service Edge Engineer prep.
Prisma Access Planning and Deployment carries 22% of the exam, more than any other domain, so we spend the most lab and review time there.
Work in the actual console whenever you can. Questions are written around how the product behaves today, not how it looked a few releases ago.
Our course follows the same blueprint, with on demand lessons you can pause and replay, and our students pass at a 98.8% rate across Accumentum courses.
Exam Policies
The rules around Security Service Edge Engineer.
Palo Alto Networks certifications, Security Service Edge Engineer included, are valid for two years from the day you pass. To stay active you recertify by passing the exam again.
Passing a higher level exam in the same track automatically extends your active lower level certifications in that track by two years. For Security Service Edge Engineer that can include an active Network Security Professional, Cybersecurity Practitioner or Cybersecurity Apprentice certification.
If you don't pass, you get a results report broken down by domain. Palo Alto Networks requires a 15 day wait before a second attempt, 30 days before a third and 90 days before any attempt after that. After a pass you can't sit the same exam again for 18 months.
Exams are delivered in English through Pearson VUE, and candidates testing in non English speaking countries get a 30 minute time extension by default. Your badge and certificate come through Credly.
Career Outcomes
Jobs that line up with Security Service Edge Engineer.
SSE Engineer lines up with Prisma Access and SASE engineering roles, plus network and security engineers who support remote users and private application access.
Per the U.S. Bureau of Labor Statistics, information security analysts earned a median annual wage of $129,180 in May 2025. BLS also projects employment of information security analysts to grow 21 percent from 2025 to 2035, much faster than the average for all occupations. That figure is a national midpoint. Where you live, how long you have been in the field and who you work for all move the number. Source: BLS Occupational Outlook Handbook.
Funding
Ways to pay for Security Service Edge Engineer training.
Our funding page lays out every way to pay for training, and PathPay lists the courses that qualify for a monthly plan.
Veterans can look at VR&E benefits for career training, and our Veteran Skill Forge programs bundle several courses into one path. Questions about your situation? Contact us and we'll talk it through.
Frequently Asked Questions
Common questions about our Security Service Edge Engineer course.
Palo Alto Networks Certified Security Service Edge Engineer is a Specialist level certification from Palo Alto Networks. Details are on the official certification page at https://www.paloaltonetworks.com/services/education/palo-alto-networks-sse-engineer.
No. We're an independent training provider and we aren't a Palo Alto Networks partner. Our course follows the public exam blueprint in the official datasheet. Palo Alto Networks offers its own learning paths at learn.paloaltonetworks.com.
Palo Alto Networks lists Specialist exams at $250 USD, and taxes may apply. Vouchers are sold through Pearson VUE and expire 12 months after purchase. Check the current price before you buy.
No. Since August 1, 2025, Palo Alto Networks certification exams are delivered in person at Pearson VUE test centers only.
Two years from the date you pass. You renew by retaking the exam, and passing a higher level exam in the same track renews your active lower level certifications.
Palo Alto Networks recommends 3 years in network security and 1 to 2 years with Prisma Access. Recommended certifications are Cybersecurity Practitioner and Network Security Professional. We don't have enrollment prerequisites.
Instructor-led, with hands-on labs and practice questions. Ask us about upcoming class dates.
Use the registration page linked below, or email info@accumentum.net and we'll follow up with dates and next steps.
5. Per the official datasheet they are Prisma Access Planning and Deployment (22%), Prisma Access Services (22%), Prisma Browser (22%), Prisma Access Administration and Operation (16%), Prisma Access Troubleshooting (18%).
Prisma Access Planning and Deployment at 22%, per the Palo Alto Networks datasheet.
Recommended work experience: 3 years in a network security-related field, 1 to 2 years with Palo Alto Networks Prisma Access solutions.
Palo Alto Networks recommends Palo Alto Networks Certified Cybersecurity Practitioner and Palo Alto Networks Certified Network Security Professional. They aren't required.
Palo Alto Networks lists SSE engineers, Prisma Access engineers, security engineers, network engineers, SSE professional services consultants and SSE technical support engineers.
Palo Alto Networks requires a 15 day wait after a first failed attempt, 30 days after a second and 90 days after a third. Once you pass, you can't retake the same exam for 18 months.
Our PathPay page lists the courses that qualify for a monthly plan. For anything else, contact us and we'll go over options.
Enrollment
Enroll in Security Service Edge Engineer training with Accumentum.
Enroll in our Security Service Edge Engineer course to get ready for the Palo Alto Networks Certified Security Service Edge Engineer exam with instructor-led classes and hands-on labs.
For dates and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on Security Service Edge Engineer?
Tell us your target date and we'll help you plan the path.