Palo Alto Networks Certified Network Security Engineer (PCNSE)

Palo Alto Networks · Retired 2025

Palo Alto Networks retired PCNSE (and PCNSA) in 2025 when it rebuilt its certifications around job roles. The closest successor is Next-Generation Firewall Engineer, which covers PAN-OS configuration, policies, VPNs and firewall management. Broader network security roles map to the new Network Security Professional certification.

Take this insteadPalo Alto Networks Certified Next-Generation Firewall Engineer (NGFW Engineer)Specialist-level Palo Alto Networks credential for hands-on NGFW configuration, the direct replacement for the retired PCNSE.See NGFW Engineer →

If you already hold it

Your PCNSE stays valid until its original two-year expiry. There is no bridge exam; to stay certified you take an exam in the new framework.

Sources: Palo Alto Networks certifications · Red Education: PCNSE retirement guide