What can we help you with?
Palo Alto Networks Learning Center
Thank you for your interest in Palo Alto Networks Learning Center and training!
If you are already a Palo Alto Networks portal user as a customer, partner, or employee, you can sign in to the Learning Center with your existing Palo Alto Networks user ID and password.
If you do not have an existing account with Palo Alto Networks, you can register for a Learning Center account. Select the appropriate user type and follow the directions provided to create an account. Be sure to register using your business or academic email address based on your relationship with Palo Alto Networks.
PLEASE NOTE: If you are registering as a partner, the process can take up to 48 hours for approval through NextWave before your account is created. If you have not heard back from Nextwave in 48 hours, please contact nextwave@paloaltonetworks.com directly to open up a ticket.
If you are experiencing problems accessing the Learning Center, please try the following:
- Clear your browser’s cache.
- Close your browser’s window.
- Open a new window.
- Attempt to log back in to the Learning Center.
The Learning Center provides multiple ways to help you find the training you need.
Search for Training:If you know the full or partial name of training you are looking for, or the subject of the training, enter it into the search bar located in the upper right of the screen. Relevant responses will automatically populate similar terms as you type. Click on the displayed term to go directly to that training entry. Or, to view a list of search results, click on the magnifying glass to view all related results. Once your search results are displayed, you can click on the "Refine search" link to further narrow your search criteria.
Browse for Training: From the Learning Center homepage, click on the "Training Catalog" icon to begin browsing; or, from the "Learning" tab in the upper left of the screen, select the "Browse for Training" drop down option. The results displayed here can be sorted by: Title, Most Recently Added, Duration and Popularity. The results can also be filtered by:
- Subject: Filter the results to display training in specific subject areas.
- Training Type: Online Class (eLearning or self-paced learning), Event (instructor led training), Curriculums (blended learning of multiple training modules or types), Tests, Videos, and Materials. Click on the icon of the training type you want to see in your results. Note: you must click on the icon again to remove it from your filters, or click the "clear" link. Clicking on additional content type icons will add that content type to your existing filter criteria.
- Date Range: Enter a range for the start date of instructor led training options. Note: if you request a training with an Authorized Training Center (ATC), you will need to contact the ATC of your choice directly to confirm pricing and registration.
- Location: Select a location to filter where the training will occur.
When you find a training, you are interested in, click on the title to review further details.
Additionally, for Palo Alto Networks Partners and Employees:
- Getting Started: From the Learning Center homepage click on the "Getting Started" icon to view suggested role based learning paths of training and exams to support your role.
- Accreditations and Certifications: Click on the "Accreditations & Certifications" icon to view the required exams to achieve accreditation and certification status, FAQ’s, study guides, and suggested training to prepare for the exams.
NOTE: Online training will open in a new browser window. Please ensure you have allowed pop-ups from the Palo Alto Networks Learning Center.
Curriculums: When you have reviewed the details of the curriculum and decide you would like to enroll in it, click on the "Request" button. This will enroll you in the curriculum and add the curriculum to your Transcript in the Active training section. Your screen will refresh to your Transcript and you will be able launch and begin completing the training included in the curriculum from there.
NOTE: Be sure to review the curriculum for any events (e.g. instructor led training) you may need to select a specific session date to enroll in as well.
Events (Instructor Led Training):
- Technical Training for Customers and Partners: Open enrollment technical training is delivered
via Palo Alto Networks Authorized Training Centers (ATCs). Additionally, private onsite classes
for 5 or more of your staff can be delivered at your site by a Palo Alto Networks instructor.
- Open Enrollment Classes: Public open enrollment instructor led training is delivered via Palo Alto Networks Authorized Training Centers. Available dates for training, and the Authorized Training Partner delivering the class, are listed in the Learning Center. Prior to registering in the Learning Center, you will need to first confirm your registration directly with the specific Authorized Training Partner delivering the training. Instructions are provided in the Learning Center training description for accessing the Authorized Training Partner’s website directly. For more information on Authorized Training Partners please refer to the section on Authorized Training Partners (ATCs).
- Private Onsite Classes: if you have 5 or more staff needing to be trained you can schedule an onsite training for your company. Please see the section on scheduling onsite training for further details.
- Role and Functional Based Training for Palo Alto Employees and Partners: When you have reviewed the details of the training and decide you would like to enroll in it, select a session date and location for the training and click on the "Request" button. This will enroll you in that training session and add the training title to your Transcript in the Active training section. Your screen will refresh to your Transcript.
If the "Request" button is not present, it may indicate that the training roster is full, or the registration has otherwise been closed.
To access a specific training, click on the action button next to that training’s title which will display an action appropriate for the content type; i.e. "Launch" for and Online Class, or "View Training" for an instructor led training session, "Open Curriculum" for a curriculum, etc. For an Online Class, be sure you have allowed pop-up windows from the Palo Alto Networks Learning Center.
Note: In a curriculum, some training entries may need to be completed in the order they are listed, and the action button may not appear on some entries until the preceding training entries have been completed.
Additional details about the specific training can be found by clicking on the title of the training, or on the down arrow in the action button and selecting "View Training Details."
If you are having trouble accessing and launching your online training, please complete these steps in order:
- Ensure your training is on your active transcript by scrolling over the Learning tab, then
clicking My Learning:
- If your training in on your active transcript, continue to step 2.
- If your training is not on your transcript, search for the training in the upper-right hand search bar, select "Request" to request the training, then continue to step 2.
- Ensure you have allowed pop-up windows from the Palo Alto Networks Learning Center.
- Clear your browser’s cache, close your browser, open a new browser window, and try to access and launch the training in the Learning Center again.
NOTE: Completed training can still be accessed from your Completed training transcript.
If you are enrolled in an Event (e.g. instructor led training), soon after you attend the event the instructor will update the roster to indicate successful attendance and completion, and the training status will update to Completed and the Event will move from your Active transcript to your Completed transcript.
If you are enrolled in a Curriculum, all training included in the curriculum must be completed for the curriculum to move from your Active transcript to your Completed transcript.
Note: your completed training entries within a curriculum will remain visible and accessible in your curriculum while you are completing all the required curriculum training entries.
Other training content types may require you to acknowledge you have completed the training by clicking on the action button. Taking this action will update the training status to Completed and will move the item to your Completed transcript.
NOTE: Be sure to check the training details to see if any penalties apply for withdrawing from the training within certain timeframes.
When the withdraw action is completed the training will remain in your Active transcript with a status of Withdrawn. You can now select an alternate session, or archive the training to move it to your Archived transcript.
Remove a Training from Your Active or Completed Transcript: If you no longer want to see a specific training in your Active or Completed training transcript, you can archive it. Training that has been archived can still be accessed, but it will no longer be displayed in your Active or Completed training transcript.
To archive a training, view the training details in your Active or Completed training by clicking on the training title, or by selecting "View Training Details" from the drop-down arrow on the action button. In the Training Details display click on the "Move to Archived Transcript" link in the upper right part of the display, and confirm that you want to complete the archiving action.
Training items which have been successfully requested cannot be deleted from your transcript.
- Login to the Palo Alto Networks Learning Center.
- Select the "Learning" tab then click "My Learning" from the drop-down menu.
- Change the view from Active to Completed training.
- Click on the action button labeled "View Certificate."
- A printable certificate of completion will open in a new browser window. (Be sure you have enabled pop-up windows from the Palo Alto Networks Learning Center.)
Note: Printable certificates of completion may not be valuable for all training entries.
*Visit the Certifications information site to obtain certificates of completion for Palo Alto Networks PCNSE certification.
Name Changes: If you need to change your first or last name, while retaining your existing account, please send an email to edu-learning@paloaltonetworks.com informing us of the required changes. You will receive a confirmation email back when the change is complete.
Company Transfers: If you have transferred between companies and would like to have your prior completed training transcript transferred to your new account please follow these steps:
- Create your new account in the Learning Center.
- Login to the Learning Center with the new account to activate it.
- Send an email to edu-learning@paloaltonetworks.com informing us you need to have your transcript copied, clearly indicating your prior account use rid (email address) and new account user ID (email address).
- Your transcript will be transferred and the previous account deactivated.
Company Status Changes: If your relationship to Palo Alto Networks has changed from a Customer to a Partner, and your account has stayed the same (e.g. using the same email address), please send an email to edu-learning@paloaltonetworks.com informing us of this relationship change. Your partner status will be validated, and once validation is complete, your account will be updated to reflect the new status.
PLEASE NOTE: The Learning Center only allows valid business email addresses and partners may have to wait 48 hours for approval through NextWave. If you have not heard back from Nextwave in 48 hours, please contact Nextwave@paloaltonetworks.com directly to open up a ticket.
If you would like to have your existing certifications transferred to a new account, please follow these steps:
- Create your new account in the Learning Center.
- Login to the Learning Center with the new account to activate it.
- Send an email to edu-learning@paloaltonetworks.com informing us you need to have your transcript copied. Please clearly indicate your prior account user ID (email address) and new account user ID(email address).
Once your transcript has been transferred over to the new account, the previous account will be deactivated. Please allow 48 hours for the changes to apply and sync to complete.
PAN-OS® 9.0 Courseware
The following instructor-led training courseware were updated based on the latest version of PAN-OS 9.0:
- Firewall 9.0 Essentials: Configuration and Management (EDU-210)
- Firewall 9.0: Optimizing Firewall Threat Prevention (EDU-214)
- Panorama 9.0: Managing Firewalls at Scale (EDU-220)
- Firewall 9.0: Troubleshooting (EDU-330)
The following self-paced Digital Learning PAN-OS® 8.1 will be updated to 9.0 (coming soon) :
The following instructor-led training courseware were updated based on the latest version of PAN-OS 9.0:
Detailed course descriptions for each of the updated and new instructor led training courses can be found at the following locations:
- Firewall 9.0 Essentials: Configuration and Management (EDU-210)
- Firewall 9.0: Optimizing Firewall Threat Prevention (EDU-214)
- Panorama 9.0: Managing Firewalls at Scale (EDU-220)
- Firewall 9.0: Troubleshooting (EDU-330)
Course descriptions for self-paced Digital Learning can be found at the following locations:
The updated Learning Paths for Firewall PAN-OS® 9.0:
Training Vouchers are to be redeemed before the expiration date printed on the Training Voucher for the course duration printed on the Training Voucher. Please inquire with the Authorized Training Center of your choice directly to confirm the course version being offered.
Marketing Vouchers ("M"-prefix Training Vouchers) are valid for 90 days, with the expiration date printed on the voucher. The “M5” -prefix Training Vouchers are valid only for a single seat in the EDU-210 5-day course. The “M3”-prefix Training Vouchers are valid for redemption of any singular 3-day Palo Alto Networks Authorized Training course. Questions regarding “M” Training Vouchers should be directed to vouchers@paloaltonetworks.com.
Standard Training Vouchers valid for 1 year with the expiration date printed on the voucher. They are valid for a single seat in a specified course, but can be redeemed for any single, authorized course of equal duration or less, as printed on the training voucher.
Please inquire directly with the ATC to determine course version currently offered.
For any other Training Voucher issues please inquire with atc-program@paloaltonetworks.com.
Yes, the concepts covered in the updated courseware are still applicable to previous versions of PAN-OS®. Also, the previous PAN-OS® version of self-paced Digital Learning remains available in the Learning Center, but please note these courses have not been updated to reflect the current cybersecurity threat landscape.
Your existing ACE accreditation remains in effect until it expires.
Palo Alto Networks will no longer offer the ACE with the release of 9.0.
With the release of 9.0, we are including a new post-class assessment in the Learning Center associated with the Firewall 9.0. Essentials: Configuration and Management (EDU-210) course.
Palo Alto Networks has recently introducing the PCNSA a new formal Certification available through Pearson VUE that is aligned with the Firewall 9.0. Essentials: Configuration and Management (EDU-210). A Palo Alto Networks Certified Network Security Administrator (PCNSA) can operate Palo Alto Networks next-generation firewalls to protect networks from cutting edge cyber threats.
Your existing PCNSE certification remains in effect for 2 years from the date of initial certification. However, we recommend taking the updated PCNSE exam to demonstrate current knowledge in Palo Alto Networks technology.
The PCNSE exam is currently covering PAN-OS® 8.1. The PCNSE will be updated to require PAN-OS® 9.0 specific knowledge during Summer 2019.
The PALO ALTO NETWORKS CERTIFIED NETWORK SECURITY ADMINISTRATOR (PCNSA) certification verifies that a person can operate Palo Alto Networks next-generation firewalls to protect networks from cutting-edge cyber-threats. The PCNSA is a fundamental certification that validates your ability to configure the central features of Palo Alto Networks next generation firewall and to effectively operate the firewalls to enable network traffic based on who (User-ID), what (App-ID), and when (Policy), all while ensuring security (Content-ID).
PAN-OS® 8.1 Courseware
- Firewall 8.1 Essentials: Configuration and Management (EDU-210), a 5-day course, is an update to the existing Firewall 8.0: Essentials: Configuration and Management (EDU-210)
- Firewall 8.1: Optimizing Firewall Threat Prevention (EDU-214) is a brand new 4-day course that is designed as a follow-on to the introductory Firewall 8.1 Essentials: Configuration and Management (EDU-210) course.
- Panorama 8.1: Managing Firewalls at Scale (EDU-220) is a brand new 2-day course that replaces the Panorama 8.0: Manage Multiple Firewalls (EDU-221).
- Firewall 8.1: Troubleshooting (EDU-330) is a brand new 3-day course that replaces the Firewall 8.0: Debug and Troubleshoot (EDU-311)
The following e-Learning courseware covering PAN-OS® 8.1 was released:
- Firewall Essentials: Configuration and Management e-Learning (EDU-110)
- Firewall 8.1: Optimizing Firewall Threat Prevention (EDU-114)
- Panorama 8.1: Managing Firewalls at Scale (EDU-120)
Detailed course descriptions for each of the updated and new instructor led training courses can be found at the following locations:
- Firewall 8.1 Essentials: Configuration and Management (EDU-210)
- Firewall 8.1: Optimizing Firewall Threat Prevention (EDU-214)
- Panorama 8.1: Managing Firewalls at Scale (EDU-220)
- Firewall 8.1: Troubleshooting (EDU-330)
Course descriptions for e-Learning courseware can be found at the following locations:

Also, the previous PAN-OS® version of e-Learning courseware remains available in the Learning Center, but please note these courses have not been updated to reflect the current cybersecurity threat landscape.
Authorized Training Centers will be transitioning public course offerings from 8.0 to 8.1 at their discretion from now through July 1. Please inquire with the Authorized Training Center of your choice directly to confirm the course version being offered.
Marketing Vouchers ("M"-prefix Training Vouchers) are valid for 90 days, with the expiration date printed on the voucher. The “M5” -prefix Training Vouchers are valid only for a single seat in the EDU-210 5-day course. The “M3”-prefix Training Vouchers are valid for redemption of any singular 3-day Palo Alto Networks Authorized Training course. Questions regarding “M” Training Vouchers should be directed to vouchers@paloaltonetworks.com.
Standard Training Vouchers valid for the 3-day EDU-311 course or 2-day EDU-221 course can be redeemed for any course of the same or less duration as printed on the Training voucher. Please inquire directly with the ATC to determine course version offering.
For any other Training Voucher issues please inquire with atc-program@paloaltonetworks.com.
Certification
Palo Alto Networks certifications provide assurance that an individual’s knowledge of cybersecurity, network security, and ability to deploy and operate the Palo Alto Networks Security Operating Platform meets an established industry standard.
The Palo Alto Networks Certified Cybersecurity Associate (PCCSA) certification verifies that a person possesses knowledge of the cutting-edge cyber-threats of today and the technologies available to mitigate those threats. The PCCSA is an introductory certification that validates your up-to-date knowledge on cyber-threats and cybersecurity.
The Palo Alto Networks Certified Network Security Administrator (PCNSA) certification verifies that a person can operate Palo Alto Networks next-generation firewalls to protect networks from cutting-edge cyber-threats. The PCNSA is a fundamental certification that validates your ability to configure the central features of Palo Alto Networks next generation firewall and to effectively operate the firewalls to enable network traffic based on who (User-ID), what (App-ID), and when (Policy), all while ensuring security (Content-ID).
The Palo Alto Networks Certified Network Security Engineer (PCNSE) certification verifies that a person is capable of designing, deploying, configuring, maintaining, and troubleshooting the majority of Palo Alto Networks Security Operating Platform implementations. The PCNSE is an expert-level certification that validates your knowledge of the Security Operating Platform, ensuring you can make use of its full functionality to benefit your company and showcase your expertise.
- The begin Certification on the Path for Palo Alto Networks Certifications is the Palo Alto Networks Certified Cybersecurity Associate (PCCSA). The PCCSA is the introductory Palo Alto Networks Certification for Cybersecurity Students or Industry newcomers focusing on cyber threats and cybersecurity.
- The next Certification on the Path for Palo Alto Networks Certifications is the Palo Alto Networks Certified Network Security Administrator (PCNSA). The PCNSA is the fundamental Palo Alto Networks Certification for security admins responsible for deploying, operating and managing Palo Alto Networks next-generation firewalls to protect networks from cutting-edge cyber-threats.
- The advanced Certification on the Path for Palo Alto Networks Certifications is the Palo Alto Networks Certified Network Security Engineer (PCNSE).The PCNSE is the expert level Palo Alto Networks Certification for Palo Alto Networks next-generation firewall security engineers capable of designing, deploying, configuring, maintaining, and troubleshooting the majority of Palo Alto Networks Security Operating Platform implementations.
For more information about PCCSA, PCNSA and PCNSE, please visit Palo Alto Networks Certification.
The PCCSA, PCNSA and the PCNSE are all formal Palo Alto Networks Certification exams proctored through Pearson VUE.
The Palo Alto Networks Certified Cybersecurity Associate (PCCSA) is an introductory certification that validates your up-to-date knowledge on cyber-threats and cybersecurity.
Once passed, it indicates that a Palo Alto Networks Certified Cybersecurity Associate (PCCSA) possesses knowledge of cutting-edge technology available today to manage the cyber threats of tomorrow.
The Palo Alto Networks Certified Network Security Engineer (PCNSE) exam is an expert level certification that validates you possess an in-depth knowledge of how to design, install, configure, manage, and troubleshoot the vast majority of implementations that use the Palo Alto Networks platform.
For more information about PCCSA, PCNSA and PCNSE, please visit Palo Alto Networks Certification.
Online Proctored (OP) Exams is a new option from Palo Alto Networks. Now you can take certification exams in your own home or office while being monitored by a remote proctor. This option provides more convenience for you by removing the requirement to travel to an authorized testing center.
The process of scheduling an Online Proctored exam is easy and convenient. Simply sign in or create an account at www.pearsonvue.com/paloaltonetworks/op and register! When you register select the exam you want to schedule and look for the option to select “OP”.
The Palo Alto Networks Certified Cybersecurity Associate (PCCSA) is an entry-level certification that will validate that a candidate possesses knowledge of cutting-edge technology available today to manage the cyberthreats of tomorrow.
PCCSA-certified individuals have detailed knowledge of the latest trends in networks-based cyberattacks, and of cutting-edge technologies available to prevent them.
The Palo Alto Networks Certified Network Security Engineer (PCNSE) certification verifies that a person is capable of designing, deploying, configuring, maintaining, and troubleshooting the majority of Palo Alto Networks Security Operating Platform implementations. The PCNSE is an expert-level certification that validates your knowledge of the Security Operating Platform, ensuring you can make use of its full functionality to benefit your company and showcase your expertise.
The PCCSA certification exam is a formal certification exam that can be attempted by anyone who has for newcomers who are ready to start their professional career in the field of cybersecurity. This certification has no prerequisites. Recommended training includes the Palo Alto Networks Cybersecurity Survival Guide and the Cyber Security Foundation digital learning course.
The Palo Alto Networks Certified Network Security Administrator exam is a formal certification exam that can be attempted by anyone who has completed either the EDU-210 or EDU-110 course. The PCNSA exam is based on the current PAN-OS® release.
The Palo Alto Networks Certified Network Security Engineer exam is a formal certification exam that can be attempted by anyone who has extensive hands-on experience with our next-generation hardware firewalls, VM-Series firewalls, GlobalProtect, and Panorama management environment. That experience should be in a wide variety of situations, including both large and small deployments, and in edge and data center deployments.
If your experience is incomplete, you should strongly consider attending our most current training courses: Firewall Essentials: Configuration and Management (EDU-210) and Panorama: Manage Multiple Firewalls (EDU-220). Although courses alone cannot cover everything that a PCNSE needs to know, they’re the most efficient way to start learning. After you have mastered the basics, you should spend time on our platform, practicing use of the information in the Admin Guides.
For a list of current training offerings and schedules, and to enroll in a class, please visit our Authorized Training Center here.
Palo Alto Certifications are valid for 2 years. Candidates can track the expiration date on a exam taken at a Pearson VUE test center by logging into CertMetrics and selecting the Certification page.
For more information on CertMetrics, please click here.
Certification exam prices vary based on exam type, location/country and other various factors. For more information, please check the Palo Alto Networks Pearson VUE website.
The exams are currently computer-based assessments of knowledge and skills. There are multiple choice, matching and ordering questions.
As preparation for Palo Alto Networks Certification exams, recommended courses and study materials are available.
All Palo Alto Networks Certification exams are hosted and proctored by Pearson VUE, a third-party testing company.
Please click here to register for an exam.
Passing scores are set using statistical analysis and are subject to change. Palo Alto Networks does not publish exam passing rates or reveal the questions the candidate got wrong, percentages, and/or additional details on the score report.
Candidates receive a score report at the completion of the exam. To view, please log into Pearson VUE and click View Score Report under My Account.
If candidate needs to reschedule or cancel their exam the must contact Pearson VUE 48 hours prior to the exam appointment. Rescheduling an exam less than 48 hours in advance is subject to the same day forfeit of exam fee.
Exams scheduled with ADA accommodations need to reschedule or cancel their exam 72 hours in advance or will be subject to the same day forfeit exam fee.
Please visit the Pearson VUE website to learn more.
In the event a candidate fails their 1st attempt to pass any Palo Alto Networks certification exam, Palo Alto Networks requires the candidate to wait 5 business days.
If a candidate fails their 2nd attempt Palo Alto Networks requires the candidate to wait 15 business days before than can attempt to pass the exam again.
After the 3rd attempt a candidate will be required to wait an additional 15 business days prior to attempting to pass the exam again.
If the candidate is unsuccessful after the 3rd attempt, candidate will need to contact certification@paloaltonetworks.com prior to any additional attempts.
For a better understanding, please review the ID requirements prior to scheduling your exam appointment.
ESL Accommodations (30 minutes extension) are automatically granted based on the candidates mailing address. Your email address is in the US which is why you did not get the automatic extension.
If you would like to request an extension, please provide a copy of government issued ID showing you’re from a country where English is not the primary language. The Certification team will coordinate with Pearson VUE to add the accommodation.
Please submit your request to certification@paloaltonetworks.com.
Professional-level Certification exam certificates are available in the certification management system – CertMetrics.
To download, please log into CertMetrics > click on the Certifications tab > print available PDF.
To reset the CertMetrics password, please go to CertMetrics and click on the “Forgot your password or login ID” link. Next, you’ll need to select the “By Login ID” option to reset using your email. Do NOT use the “By Score Report” option to reset your password.
To view or download badges, log into CertMetrics > click on the Badges tab > select desired badge from Active Badges.
To view or download logos, log into CertMetrics > click on the Certification tab > click on desired logo.
Palo Alto Certifications are valid for 2 years. Candidates can track the expiration date on a exam taken at a Pearson VUE test center by logging into CertMetrics and selecting the Certification page.
For more information on CertMetrics, please click here.
Please send the following information to certification@paloaltonetworks.com:
- What email address did you use to complete the exam?
- Is the email address different from your Palo Alto Networks registered profile? If so, please provide both addresses.
- What is the exam name?
- When did you pass this exam?
- What is the preferred spelling of your name? Please provide in the format bellow:
- First Name:
- Last Name:
Once your request is received, the Certification team will process it and provide further instructions.
How to update/change Pearson VUE account information:
- Log into http://pearsonvue.com/paloaltonetworks/
- Select My Profile under My Account
- Locate desired fields and select Edit
- Update fields and click Save and Continue to keep any changes
For additional support, please contact Pearson VUE Customer Service.
How to update/change CertMetrics account information:
- Log into https://www.certmetrics.com/paloaltonetworks
- Select the Demographics tab
- Make changes to available fields
- Click Save to apply changes.
CertMetrics does not allow name changes. Please send your request to certification@paloaltonetworks.com with the following information included:
- Email address of CertMetrics account
- Preferred spelling in format below:
- First Name:
- Last Name: