The Accredited Configuration Engineer (ACE) exam tests your knowledge of the core features and functions of Palo Alto Networks next-generation firewalls, and serves as an objective indication of your ability to configure Palo Alto Networks firewalls using PAN-OS. 


Passing the ACE exam indicates that you possess the basic knowledge to successfully configure Palo Alto Networks firewalls using PAN-OS.  The exam also serves as a study aid to prepare for PCNSE certification.


Exam Format

The ACE exam is web-based and consists of 40-50 multiple-choice questions. The exam is not timed, and you can retake it as many times as necessary to earn a passing score.


Cybersecurity Skills Practice Lab

Easy access to a Palo Alto Networks virtual firewall environment for exam preparation and skills advancement.

Learn more at Palo Alto Networks Cybersecurity Skills Practice Lab

Preparing for the Exam

To pass the ACE exam, you need foundational knowledge of, and hands-on familiarity with, PAN-OS configuration. The best way to gain this knowledge is to take the Firewall 8.1 Essentials: Configuration and Management course. This courseware can is available in both Instructor Led Training and self-paced e-Learning formats.

Taking the Exam

The ACE exam is delivered through the Palo Alto Networks Learning Center.  

Click on the following link to register for the appropriate exam: 

Request the ACE Exam (PAN-OS 8.1 version)





For additional details about the ACE exam, please refer to the ACE Frequently Asked Questions list (ACE FAQs).



What is an Intrusion Prevention System?

An Intrusion Prevention System (IPS) is a network security prevention technology that examines network traffic flow to detect and prevent vulnerability exploits
  • 2
  • 92042

What is Cybersecurity?

Cybersecurity refers to the preventative techniques used to protect the integrity of networks, programs and data from attack, damage, or unauthorized access.
  • 1
  • 70600

PA-5200 Series Datasheet

Key features, performance capacities and specifications for our PA-5200 Series.
  • 15
  • 80362

What is a denial of service attack (DoS) ?

A Denial-of-Service (DoS) attack is an attack meant to shut down a machine or network, making it inaccessible to its intended users by flooding it with traffic.
  • 0
  • 39922

Cyberthreat Defense Report 2018

CyberEdge Group’s fifth annual Cyberthreat Defense Report provides a penetrating look at how IT security professionals perceive cyberthreats and plan to defend against them. Based on a survey of 1,200 IT security decision makers and practitioners conducted in November 2017, the report delivers countless insights that IT security teams can use to better understand how their perceptions, priorities, and security postures stack up against those of their peers.
  • 0
  • 10284

PA-800 Series Datasheet

Palo Alto Networks PA-800 Series next-generation firewall appliances are designed to secure enterprise branch offices and midsized businesses.
  • 13
  • 77194