The supply of this course/package/program is governed by our terms and conditions. Please read them carefully before enrolling, as enrolment is conditional on acceptance of these terms and conditions. Proposed course dates are given, course runs subject to availability and minimum registrations.
PCNSE Palo Alto Networks Certified Network Security Engineer Training
Length
5 days
Price
$2499
Days
Mon - Wed
Learn More
Why Choose This Course
The Palo Alto Networks Certified Network Security Engineer training is designed for professionals who deploy, configure, operate and troubleshoot Palo Alto Networks next‑generation firewalls and associated subscriptions and management tools. It provides structured, exam‑aligned content based on the PCNSE blueprint domains such as core concepts, deployment and configuration, Panorama‑based management, operations and troubleshooting. This course is suitable for learners in Melbourne, Sydney, Brisbane, Perth, Canberra and Adelaide who want to build platform proficiency and prepare for role‑based responsibilities using Palo Alto Networks technologies. Please note: Palo Alto Networks announced that the legacy PCNSE certification exam was retired on 31 July 2025 as part of its transition to new role‑based certifications (Network Security Generalist, Network Security Analyst, Next‑Generation Firewall Engineer). Training remains highly relevant and aligned to the same technical skill areas, and helps candidates gain practical capability for these roles and for maintaining existing PCNSE knowledge where applicable. Across hands‑on labs and scenario‑driven exercises, you will learn how products in the Palo Alto Networks network security portfolio work together, configure security profiles and policies, implement App‑ID, User‑ID and decryption, deploy GlobalProtect, administer firewalls centrally with Panorama, and apply operational best practices and troubleshooting techniques. The content reflects the current scope traditionally covered by the PCNSE blueprint and the vendor’s certification framework emphasis on job‑ready skills. For professionals in Australia, platform expertise in next‑generation firewalls remains in demand across sectors adopting Zero Trust, hybrid networks and secure remote access. This training focuses on practical value: translating vendor features into secure designs, consistent policy management, and effective operations—without over‑promising outcomes.
Prerequisites
- There are no formal prerequisites for this course.
Exam
- There is no certification exam associated with this training course.
Books
- PCNSE Palo Alto Networks Certified Network Security Engineer Training course material included.
Delivery
- Face-to-Face
- Live Virtual Instructor-led
Training
Skills Gained
- Explain how Palo Alto Networks firewall, Panorama and subscriptions integrate to deliver prevention‑focused security.
- Identify and select appropriate interface and zone types for different deployment scenarios.
- Configure App‑ID‑based rules and transition from port/protocol policies to application‑aware policies.
- Implement URL Filtering, Threat Prevention and related security profiles aligned to best practice.
- Design and apply User‑ID, group mapping and authentication policy for identity‑aware controls.
- Plan and deploy decryption, including profiles, certificates, SSH proxy and use‑case considerations.
- Configure GlobalProtect portals, gateways, agent settings and Clientless VPN with HIP‑based policy.
- Use Panorama templates, stacks and variables to standardise configuration across fleets.
- Operate firewalls with dynamic updates, logging, reporting and health monitoring workflows.
- Troubleshoot traffic flow, policy evaluation, content updates and management‑plane/data‑plane functions.
- Apply multi‑vsys concepts including inter‑vsys routing and service routes in complex environments.
- Align skills to Palo Alto Networks’ role‑based certification framework for NGFW engineers and analysts.
Audience
- Network security engineers, firewall administrators, systems engineers, security analysts, and support staff working with Palo Alto Networks network security products in enterprise or service‑provider environments
Objectives
- Provide participants with the skills to deploy, configure and manage Palo Alto Networks next-generation firewalls.
- Develop practical knowledge of core firewall features including App-ID, User-ID, and security profiles.
- Enable learners to implement secure remote access using GlobalProtect.
- Teach centralised management of firewalls using Panorama templates, stacks and device groups.
- Build troubleshooting capabilities for traffic flow, policy evaluation and system health.
- Align training with the technical domains of the former PCNSE certification and current role-based certifications.
- Support professionals in applying Zero Trust principles and secure network segmentation.
- Prepare learners to operate in enterprise and service-provider environments using Palo Alto Networks technologies.
- Reinforce best practices for policy creation, logging, monitoring and threat prevention.
- Equip learners with job-ready skills for roles such as network security engineer or firewall administrator.
Outline
- Platform security components: firewall, Panorama, subscriptions and plug‑ins overview.
- PAN‑OS management vs data plane fundamentals.
- Interfaces and zones: Layer 2, Layer 3, virtual wire, tap, subinterfaces, tunnel, aggregate, loopback, VLAN, decrypt mirror.
- Addressing and routing: VRs, static and dynamic routing, policy‑based forwarding.
- Object and policy design: applications, services, zones, address objects and groups.
- App‑ID configuration, dependencies, application override and custom applications.
- User‑ID: mapping methods, agents vs agentless, redistribution, group mapping, server/auth profiles.
- Authentication policy: captive portal vs GlobalProtect client, prerequisites and use cases.
- Decryption strategies: SSL/TLS profiles, certificates, policy creation, SSH proxy.
- Security profiles: Anti‑Virus, Anti‑Spyware, Vulnerability Protection, URL Filtering, File Blocking, DNS Security.
- Credential‑phishing prevention and HTTP header insertion.
- NAT policy and application‑aware security policy best practices.
- GlobalProtect: portals, gateways, agent configuration, Clientless VPN, HIPs, split tunnelling.
- High availability concepts and deployment considerations.
- Panorama: templates, template stacks, variables, device groups and policy layers.
- Dynamic updates and content management.
- Logging, monitoring, reporting and health checks.
- Best practice assessment, heatmaps and AIOps/telemetry.
- Multivsys design: user‑ID hub, inter‑vsys routing, service routes.
- Troubleshooting methodology: connectivity, policy hits, session lifecycle, content issues.
Price
| Days | Mon – Wed | Mon & Tue | Saturdays only |
| Time | 9:30 am to 5:00 pm | 6:00 pm to 9:00 pm | 10:00 am to 5:00 pm |
| Duration | 5 days | 1 week or 5 weeks | 1 week or 5 weeks |
| Price | $2499 | $2499 | $2499 |
Terms & Conditions
Frequently Asked Questions (FAQ's)
Is the PCNSE certification still available?
Palo Alto Networks retired the legacy PCNSE exam on 31 July 2025. Training remains valuable for current platform responsibilities and for progressing to the vendor’s role‑based certifications.
What does this training cover if the PCNSE exam is retired?
The course follows the established PCNSE blueprint domains and maps skills to the current role‑based certifications for NGFW engineers and analysts, ensuring practical alignment for on‑the‑job tasks.
Who should attend in Melbourne, Sydney, Brisbane, Perth, Canberra or Adelaide?
Network and security engineers, administrators and support professionals who deploy or manage Palo Alto Networks firewalls and subscriptions in enterprise or service‑provider environments.
Are there any formal prerequisites?
There are no formal prerequisites for this course; basic networking and firewall experience is recommended to maximise learning.
How does this training help with role‑based Palo Alto certifications?
It builds the same core capabilities assessed in the new framework, including configuration, policy creation, centralised management and troubleshooting, which are relevant to NGFW Engineer and Network Security Analyst certifications
Our Partnership
In today’s dynamic cybersecurity environment, where threats are increasingly sophisticated and persistent, developing hands-on firewall and network security expertise is critical. The Palo Alto Networks Certified Network Security Engineer (PCNSE) training equips professionals with the skills to deploy, configure, and secure enterprise networks using Palo Alto Networks Next-Generation Firewalls. This course provides practical knowledge to implement security policies, apply advanced threat prevention techniques, and support a Zero Trust approach to network protection. Learners gain experience in managing firewall interfaces, creating granular security rules, configuring GlobalProtect, and monitoring network activity to ensure resilient and compliant infrastructure.
$120,000
Average annual salary for network security professionals in Australia, with senior roles exceeding $180,000.
72%
Employers prefer candidates with recognised security certifications for firewall and network security roles.
21%
Network security job opportunities in Australia are projected to grow by 21% by 2026.
$9.18B
The Australian cybersecurity market is valued at AUD 9.18 billion and expected to reach AUD 32 billion by 2034.
2,300+
Over 2,300 entry-level cybersecurity positions remain unfilled across Australia.
98%
Leading Australian cybersecurity training programs report 98% student satisfaction.
Our Accreditations
