Validates practical skills in configuring Palo Alto Networks firewalls, including PAN-OS networking, device settings, Panorama and deployment automation.
A good NGFW Engineer course gets you configuring PAN-OS yourself, since networking and device settings make up 80% of the exam. We compared the options on hands-on practice, deployment and automation coverage, and price.
Most people should start with Palo Alto's free Beacon learning path, then cover deployment and automation with documentation and a lab. Choose EDU-210 if your employer pays and you want five days of guided firewall labs.
Palo Alto's free digital learning platform, including a Next-Generation Firewall Engineer learning path of short self-paced courses. It is the official starting point and costs nothing.
Great fit if you want the official starting point at no cost
Poor fit if you need deployment and automation topics covered in depth; choose EDU-210 or add a lab
Palo Alto's official five-day instructor-led course on configuring, managing and monitoring a firewall in a lab environment. Prices come from Palo Alto Training Credits or authorized training partners.
Great fit if your employer pays and you want guided labs
Poor fit if you already configure Palo Alto firewalls daily; choose Beacon
For most people, Palo Alto's free Beacon learning path plus a lab for deployment and automation. Choose EDU-210 if your employer pays.
Yes. The Beacon path is free, but it is light on deployment options and automation tools, so add documentation and a lab.
EDU-210 runs five days, and the Beacon path is short self-paced courses. Plan for about 50 hours of preparation in total.
No. Anyone can buy a $250 voucher and book the exam. EDU-210 is optional training.