The Accredited Configuration Engineer (ACE) exam tests your knowledge of the core features and functions of Palo Alto Networks next-generation firewalls, and serves as an objective indication of your ability to configure Palo Alto Networks firewalls using PAN-OS. 


Passing the ACE exam indicates that you possess the basic knowledge to successfully configure Palo Alto Networks firewalls using PAN-OS.  The exam also serves as a study aid to prepare for PCNSE certification.


Exam Format

The ACE exam is web-based and consists of 40-50 multiple-choice questions. The exam is not timed, and you can retake it as many times as necessary to earn a passing score.


Cybersecurity Skills Practice Lab

Easy access to a Palo Alto Networks virtual firewall environment for exam preparation and skills advancement.

Learn more at Palo Alto Networks Cybersecurity Skills Practice Lab

Preparing for the Exam

To pass the ACE exam, you need foundational knowledge of, and hands-on familiarity with, PAN-OS configuration. The best way to gain this knowledge is to take the Firewall Essentials 8.0: Configuration and Management course. This courseware can is available in both Instructor Led Training and self-paced e-Learning formats.

Taking the Exam

The ACE exam is delivered through the Palo Alto Networks Learning Center.  

Click on the following link to register for the appropriate exam: 

Request the ACE Exam (PAN-OS 8.0 version)

Request the ACE Exam (PAN-OS 7.0 version)




For additional details about the ACE exam, please refer to the ACE Frequently Asked Questions list (ACE FAQs).


Product Summary Specsheet

Key features, performance capacities and specifications for all Palo Alto Networks firewalls.

  • 72
  • 193913

2018 Predictions & Recommendations: Automated Threat Response Technology in OT Grows Up

Automated threat response, which we’ll simply refer to as ATR, is the process of automating the action taken on detected cyber incidents, particularly those deemed malicious or anomalous. For each type of incident, there is a predefined action for containment or prevention where newer technologies, such as behavioral analytics and artificial intelligence, are utilized to bring incidents of interest to the surface.

  • 4
  • 26079

PA-5200 Series Datasheet

Key features, performance capacities and specifications for our PA-5200 Series.

  • 7
  • 55960

What is an Intrusion Prevention System?

An Intrusion Prevention System (IPS) is a network security prevention technology that examines network traffic flow to detect and prevent vulnerability exploits

  • 0
  • 61097

PA-800 Series Datasheet

Palo Alto Networks PA-800 Series next-generation firewall appliances are designed to secure enterprise branch offices and midsized businesses.

  • 10
  • 56899

PA-220 Datasheet

Palo Alto Networks PA-220 brings next-generation firewall capabilities to distributed enterprise branch offices and retail locations.

  • 13
  • 50645