Sales Enablement Hub
Palo Alto Networks
The Platform
Network, cloud, SOC, identity, and AI on one platform. Start with the job in front of you — a first meeting, a competitor, a pain-to-product map, or a demo.
Search the hub
Selling Palo Alto Networks into AI Data Centers
Start Here
Where do you need to go?
Pick your role, or jump to the job in front of you. Every link below already lives on this site.
Account executive
I'm a seller
Lead with the story, the play, and the buyer's words. Hand the demo to your SE.
Technical seller
I'm an SE
Launch a tenant, rehearse the buyer, then go deep on the pillar you will show.
New to the portfolio
New to Palo
Learn the platform story before you learn the SKUs. Say the outcome, then the product name.
Goal
Prep a first meeting
Walk the whiteboard, then open the conversation guide for the pillar you will lead with.
Goal
Handle a competitor
Pick the battleground before the call. Objections and landmines live on the battle card.
Goal
Map pain to a product
Use their words. The translator shows which pillar actually answers.
Goal
Run a demo or role play
SE launches the tenant and rehearses. Seller sits in before the customer meeting.
Positioning
Lead with three platforms
Strata, Prisma SASE, and Cortex are the motions most first meetings turn on. Identity, cloud, AI runtime, and observability stay in the full pillar grid below.
Strata
Network Security
ML-powered next-generation firewalls from branch to data center, managed through a single cloud-native control plane.
Sell to the network and security teams who still own campus, data center, and OT. SASE covers users. It does not replace those environments.
Prisma SASE
Secure access
Network security, SD-WAN, secure browser, and AI-powered DLP, converged into one cloud-delivered service.
Sell to the team replacing VPN or a web-only SSE for remote users, branches, contractors, and BYOD. The budget often sits with the CIO or VP of Infrastructure.
Cortex
SecOps
XSIAM unifies SIEM, SOAR, XDR, ASM, and threat intel into one AI-driven SOC. Cortex XDR is the endpoint.
Sell to the CISO and SOC leader on Splunk, QRadar, Sentinel, or CrowdStrike — too many consoles, alert volume the team cannot clear, MTTR measured in hours.
Also on the platform, when the pain is not one of those three: Cortex Cloud for cloud posture and runtime, Prisma AIRS for AI workloads, Idira for human, machine, and AI-agent identity, and Chronosphere for observability.
Before the call
Battle cards and plays
The battlegrounds and the eight active plays. Open the card for the competitor in the account, then the play that matches the motion.
Most-used battle cards
Active sales plays
Discovery
Ask this before you pitch
Questions from the conversation guides. Pain lines from PAN Translator, with the pillar that scores highest.
Strata
What's your current firewall vendor and model? When does support expire?
Prisma SASE
How many remote and hybrid users do you have? What about contractors and BYOD?
XSIAM
What SIEM are you running today? When does the contract renew?
On the hub
What's hot right now
New pages and announcements. The dated end-of-sale list is in Live Deadlines, just below.
Act Now
Live Deadlines
Dated end-of-sale and end-of-life events that change what you can quote. Check these before you build a proposal.
Spotlight
XSIAM — The AI-Driven SOC
The fastest-growing product in cybersecurity. XSIAM 3.6 (July 20, 2026) redefines what's possible in security operations.
July 2026 Release Highlights
Frontier AI Model Choice
Native selection of Claude Sonnet 4.6, Claude Opus 4.8, and Gemini 3.5 Flash
Cortex XTI
Extended Threat Intelligence — Threat Intel Library plus AI-enabled intel, across XSIAM 3.6, XDR 5.2 and AgentiX 1.4
Natural Language Dashboards
Plus XQL macros, reshape, and free-text search across the data lake
Device Security Collector
New collector replaces the IoT Security collector (now labelled Deprecated); granular ITDR RBAC and Forensics public APIs
Platform
The Complete Security Platform
Seven pillars working together. One unified platform.
Strata
Network Security
Next-gen firewalls from PA-400 to PA-7500. ML-powered threat prevention, App-ID, and the FE400 ASIC.
Explore StrataPrisma SASE
SASE
$1.5B+ ARR. Prisma Access 6.2, Prisma SD-WAN, Prisma Browser, Enterprise CASB, and AI-powered DLP in one.
Explore SASESecOps
XSIAM
The AI-driven SOC. >$600M ARR, 740 customers, >17 PB/day. XSIAM 3.6 unifies SIEM, SOAR, XDR and ASM with AgentiX 1.4.
Deep DiveCortex XDR
XDR Prevent
Entry-level endpoint protection. Multi-layer malware, ransomware, exploit, and behavioral blocking. Legacy XDR 3.x tiering — the XDR 5.2 lineup is Cortex XDR Pro EP and Cortex XDR EP Cloud on Enterprise Runtime Security.
ExploreCortex XDR
XDR Pro per Endpoint
Advanced detection with tailored data collection, 3rd party logs, and Extended Threat Hunting. Legacy XDR 3.x tiering — current equivalent is Cortex XDR Pro EP.
ExploreCortex XDR
XDR Pro per GB
Legacy XDR 3.x per-GB ingestion tier, superseded by the Cortex XSIAM NG-SIEM data-tier model. Keep for renewals only.
ExploreCortex XDR
XDR Cloud per Host
Cloud-native endpoint protection for containers and cloud workloads. Legacy XDR 3.x tiering — current equivalent is Cortex XDR EP Cloud.
ExploreUnit 42 Managed
Unit 42 Managed XSIAM
MSIAM 2.0 (February 17, 2026). 24/7 Palo-operated managed SOC with a 250-hour Breach Response Guarantee and third-party EDR support. Unit 42 MDR on Cortex XDR Pro is the legacy-leaning option; partner delivery runs through the Cortex XMDR Specialization.
DetailsCloud
Cortex Cloud
Unified CNAPP + CDR. Code-to-cloud visibility, SmartScore prioritization, and autonomous AI agents.
Explore CloudAgentic Enterprise Ops · New
Cortex Console
Acquisition announced September 1, 2026 — terms undisclosed. An AI-native service management platform that takes a plain-language request in Slack or Teams and completes the work across identity, devices, and apps, with approvals and an OCSF audit trail. Gives Cortex the execution layer. No SKU or GA date announced yet.
Explore ConsoleAgentic Endpoint Security · New
Cortex AES (Koi)
New category — acquisition closed April 14, 2026. Secures AI agents, MCP servers, browser extensions, and AI plugins. Now GA as an integral part of the XDR agent with XDR 5.2, standalone alongside any EDR, or via Prisma AIRS.
Explore AES (Koi)AI Security · via SCM
Prisma AIRS
Prisma AIRS 3.0 (March 23, 2026) secures agentic AI — AI Model Security, AI Runtime Security, AI Agent Security, and AI Red Teaming. Portkey is now the AI Gateway for Prisma AIRS. Managed through Strata Cloud Manager.
Explore AIRSIdentity · Idira
Identity Security
Idira (formerly CyberArk) — ~$25B acquisition closed February 11, 2026, GA as Idira May 12, 2026. Privileged access for human, machine, and AI-agent identities. The 4th core pillar.
Explore IdentityChronosphere + Embrace
Observability
Chronosphere — $3.35B acquisition closed January 29, 2026, brand retained. >$300M ARR. 30%+ noise reduction via Telemetry Pipeline into Cortex XDL 2.0. Embrace closed August 27, 2026 — RUM plus Synthetics extends the platform into Digital Experience Monitoring.
Explore ObservabilitySASE
Prisma Browser
The most secure browser for the agentic AI era. Governs GenAI, secures BYOD, stops evasive threats. Native integration with Cortex XDR and XSIAM shipped with XDR 5.2; NGFW-native identification in PAN-OS 12.2.
Explore BrowserSell Tool
PAN Translator
Map any customer pain point to the right PAN solution in seconds. Heatmap matrix, pillar drill-downs, discovery questions, and deal tactics — the cheat sheet for every call.
Open TranslatorUpdates
What's New
Latest platform developments and business updates. See this week's Hot Announcements →