Palo Alto Networks Certified Network Security Engineer (PCNSE)

Palo Alto Networks · Retired 2025

Palo Alto Networks retired PCNSE (and PCNSA) in 2025 when it rebuilt its certifications around job roles. The closest successor is Next-Generation Firewall Engineer, which covers PAN-OS configuration, policies, VPNs and firewall management. Broader network security roles map to the new Network Security Professional certification.

Take this insteadPalo Alto Networks Next-Generation Firewall EngineerSpecialist-level Palo Alto Networks credential for hands-on NGFW configuration, the direct replacement for the retired PCNSE.See certification →

If you already hold it

Your PCNSE stays valid until its original two-year expiry. There is no bridge exam; to stay certified you take an exam in the new framework.

Sources: Palo Alto Networks certifications · Red Education: PCNSE retirement guide