Sales Enablement Hub

Palo Alto Networks
The Platform

Complete security across network, cloud, SOC, identity, and AI — delivered as one unified platform. Everything you need to sell, position, and win.

Explore XSIAM 3.6 Unit 42 Services
Hot Announcements — August 2026 · Embrace closes · Ceres · Frontier AI Critical Defense · PA-50R · XSIAM 3.6 · Idira What's Hot — Embrace acquisition closed Aug 27, 2026 · Real User Monitoring + Synthetics = Digital Experience Monitoring Hot Topic — AES (Koi) Workshop: Koi Quest · Live-tenant CTF for sellers and technical sellers ↗ New — XSIAM & EDR Telemetry Economics · Third-party EDR ingest volumes, native agent exemption, live sizing estimator New & Hot — Unit 42 Services · Full catalog + how to sell it Demo Launch Pad · Launch a live, customer-ready demo tenant in seconds

Quick Jump

Go Straight There

Type a product, competitor, or task and hit Enter. Press ⌘K anywhere on this page to jump into the box.

Current versions & numbers Full search

Act Now

Live Deadlines

Dated end-of-sale and end-of-life events that change what you can quote. Check these before you build a proposal.

August 20, 2026 · now passed
Legacy ELA end-of-sale
Replaced by ELA8. Any ELA still in your pipeline needs to be re-papered — ELA8 SKU detail is not published yet.
November 1, 2026
CN-Series end-of-sale
Explicitly replaced by AI Runtime Firewall (AIRS). Migration path from VM-Series shipped June 2026.
November 22, 2026
PA-5450 end-of-sale
Refresh to the PA-5500 Series. Last supported OS is PAN-OS 12.2; end-of-life November 21, 2031.
Already end-of-life
K2-Series (February 28, 2026)
Must come out of every OT and mobile-core proposal. Replace with PA-400R / PA-50R, or PA-5445 / PA-7500.

Start Here

Choose Your Path

Jump straight to the content that matters most for your role.

I'm a Seller

Conversation guides, objection handling, and discovery questions for every scenario.

I'm an SE

Demos, certifications, technical deep-dives, and training paths across every pillar.

New to Palo

Start with the platform story — how 5 pillars unify into one security platform.
★ New Sell Tool

Licensing · VM-Series · AIRS · CN-Series

NGFW Credit Estimator Walkthrough

Every field in Palo's Software NGFW Credit Estimator explained, plus the most popular credit configurations sellers actually quote — Palo's 4 vCPU reference (21.48 credits), how to size Prisma AIRS, and how to hit the 12.5% / 20% / 25% subscription incentive.

Open Walkthrough
★ New & Hot

Services · Threat Intel & Incident Response

Unit 42 Services

The complete catalog — Retainer, Incident Response, MDR/MTH, and 16 proactive assessments — plus how to sell it, package it, and attach it to every deal. 200+ responders, 1,000+ engagements a year.

Open Unit 42 Services

Spotlight

XSIAM — The AI-Driven SOC

The fastest-growing product in cybersecurity. XSIAM 3.6 (July 20, 2026) redefines what's possible in security operations.

$600M+
Annual Recurring Revenue
740
Customers Worldwide
<10m
Mean Time to Resolve
>17 PB
Ingested per Day
v3.6

July 2026 Release Highlights

Frontier AI Model Choice

Native selection of Claude Sonnet 4.6, Claude Opus 4.8, and Gemini 3.5 Flash

Cortex XTI

Extended Threat Intelligence — Threat Intel Library plus AI-enabled intel, across XSIAM 3.6, XDR 5.2 and AgentiX 1.4

Natural Language Dashboards

Plus XQL macros, reshape, and free-text search across the data lake

Device Security Collector

New collector replaces the IoT Security collector (now labelled Deprecated); granular ITDR RBAC and Forensics public APIs

Platform

The Complete Security Platform

Seven pillars working together. One unified platform.

Strata

Network Security

Next-gen firewalls from PA-400 to PA-7500. ML-powered threat prevention, App-ID, and the FE400 ASIC.

Explore Strata

Prisma SASE

SASE

$1.5B+ ARR. Prisma Access 6.2, Prisma SD-WAN, Prisma Browser, Enterprise CASB, and AI-powered DLP in one.

Explore SASE
★ Showcase

SecOps

XSIAM

The AI-driven SOC. >$600M ARR, 740 customers, >17 PB/day. XSIAM 3.6 unifies SIEM, SOAR, XDR and ASM with AgentiX 1.4.

Deep Dive

Cortex XDR

XDR Prevent

Entry-level endpoint protection. Multi-layer malware, ransomware, exploit, and behavioral blocking. Legacy XDR 3.x tiering — the XDR 5.2 lineup is Cortex XDR Pro EP and Cortex XDR EP Cloud on Enterprise Runtime Security.

Explore

Cortex XDR

XDR Pro per Endpoint

Advanced detection with tailored data collection, 3rd party logs, and Extended Threat Hunting. Legacy XDR 3.x tiering — current equivalent is Cortex XDR Pro EP.

Explore

Cortex XDR

XDR Pro per GB

Legacy XDR 3.x per-GB ingestion tier, superseded by the Cortex XSIAM NG-SIEM data-tier model. Keep for renewals only.

Explore

Cortex XDR

XDR Cloud per Host

Cloud-native endpoint protection for containers and cloud workloads. Legacy XDR 3.x tiering — current equivalent is Cortex XDR EP Cloud.

Explore

Unit 42 Managed

Unit 42 Managed XSIAM

MSIAM 2.0 (February 17, 2026). 24/7 Palo-operated managed SOC with a 250-hour Breach Response Guarantee and third-party EDR support. Unit 42 MDR on Cortex XDR Pro is the legacy-leaning option; partner delivery runs through the Cortex XMDR Specialization.

Details

Cloud

Cortex Cloud

Unified CNAPP + CDR. Code-to-cloud visibility, SmartScore prioritization, and autonomous AI agents.

Explore Cloud

Agentic Endpoint Security · New

Cortex AES (Koi)

New category — acquisition closed April 14, 2026. Secures AI agents, MCP servers, browser extensions, and AI plugins. Now GA as an integral part of the XDR agent with XDR 5.2, standalone alongside any EDR, or via Prisma AIRS.

Explore AES (Koi)

AI Security · via SCM

Prisma AIRS

Prisma AIRS 3.0 (March 23, 2026) secures agentic AI — AI Model Security, AI Runtime Security, AI Agent Security, and AI Red Teaming. Portkey is now the AI Gateway for Prisma AIRS. Managed through Strata Cloud Manager.

Explore AIRS

Identity · Idira

Identity Security

Idira (formerly CyberArk) — ~$25B acquisition closed February 11, 2026, GA as Idira May 12, 2026. Privileged access for human, machine, and AI-agent identities. The 4th core pillar.

Explore Identity

Chronosphere + Embrace

Observability

Chronosphere — $3.35B acquisition closed January 29, 2026, brand retained. >$300M ARR. 30%+ noise reduction via Telemetry Pipeline into Cortex XDL 2.0. Embrace closed August 27, 2026 — RUM plus Synthetics extends the platform into Digital Experience Monitoring.

Explore Observability
★ New

SASE

Prisma Browser

The most secure browser for the agentic AI era. Governs GenAI, secures BYOD, stops evasive threats. Native integration with Cortex XDR and XSIAM shipped with XDR 5.2; NGFW-native identification in PAN-OS 12.2.

Explore Browser
★ New

Sell Tool

PAN Translator

Map any customer pain point to the right PAN solution in seconds. Heatmap matrix, pillar drill-downs, discovery questions, and deal tactics — the cheat sheet for every call.

Open Translator

Quick Access

Essential Resources

Compete

Battle cards & positioning

Deal Playbook

Registration & co-selling

OMS Mapping

Optiv coverage matrix

Partner Architects

Team coverage & engagement

Unit 42 Services

Full catalog & how to sell it

NGFW Credit Estimator

Walkthrough & seller guide

Updates

What's New

Latest platform developments and business updates. See this week's Hot Announcements →

August 27, 2026
Embrace acquisition closed — high-fidelity Real User Monitoring for mobile and web, built on OpenTelemetry, joins the Observability platform ahead of the guided fiscal Q1 2027 window. Value undisclosed. With the organically built Synthetics capability from the ADEM team, it extends the platform into Digital Experience Monitoring. See the new Embrace page and What's Hot. Newest
August 21, 2026
AES (Koi) Workshop — Koi Quest is live — replayable live-tenant capture-the-flag for sellers and technical sellers learning Agentic Endpoint Security. Run it before an AES demo or as team enablement. See also the AES deep dive and Cortex AES (Koi) pages. Hot Topic
August 20, 2026
PA-50R ruggedized 5G NGFWs introduced — real-time AI-powered threat prevention for remote, extreme-environment OT and critical infrastructure. Clean replacement for the end-of-life K2-Series. Same day: NTT DATA global strategic alliance for secure AI transformation.
August 19, 2026
Frontier AI Critical Defense Program launched — after frontier AI models uncovered 14,000+ previously unknown open-source vulnerabilities. Collaborators include IBM, Red Hat, Microsoft (MAPP), Siemens and Idaho National Laboratory, expanding to Anthropic, OpenAI, Health-ISAC and EPRI. New
August 13, 2026
Idira achieves GovRAMP High Authorization — on top of existing FedRAMP posture, alongside the "every identity is privileged" and "identity meets the SOC" positioning. Cortex also opened a Finland cloud region for EU data residency (August 12).
August 11, 2026
Cortex Data Security enters public preview — unified DSPM, DLP and automated threat response across cloud, SaaS and AI environments.
August 4, 2026
PAN-OS 12.2 "Ceres" announced at Black Hat — released July 30, 2026, launched publicly August 4 with 55+ innovations, including the new Advanced IP Defense subscription (GA August 4, 2026) and Advanced Virtual Patching. Flagship
August 3, 2026
Unit 42 Threat Intelligence launched — delivered via Cortex XTI (Extended Threat Intelligence) plus Unit 42 Threat Intel Services. Unit 42 is now also running OpenAI frontier cyber models inside customer environments to find and validate real attack paths (August 12).
July 21, 2026
Embrace acquisition intent announced — real user monitoring for the Observability platform, plus organically built Synthetics from the ADEM team. Closed early on August 27, 2026; value undisclosed.
July 20, 2026
XSIAM 3.6, XDR 5.2, AgentiX 1.4, Cortex Cloud 2.2 and Xpanse Expander 2.14 released — frontier AI model choice, Cortex XTI across the Cortex line, natural-language dashboards, ITDR 2.0.
May 29, 2026
Portkey acquisition closed — becomes the AI Gateway for Prisma AIRS. Value undisclosed officially.
May 12, 2026
Idira GA at IMPACT 2026 — CyberArk rebranded Idira, positioned as the next-generation identity security platform built for the AI enterprise.
April 14, 2026
Koi Security acquisition closed — value undisclosed officially (~$400M press-reported). Defines the new Agentic Endpoint Security (AES) category; now GA as an integral part of the XDR agent with XDR 5.2, standalone alongside any EDR, and inside Prisma AIRS. Closed
March 23, 2026
Prisma AIRS 3.0 and NGTS launched — agentic AI security, plus Next-Generation Trust Security: network-native certificate lifecycle management and SaaS private PKI in Strata Cloud Manager.
February 11, 2026
CyberArk acquisition closed at ~$25B — identity becomes a core platform pillar covering human, machine, and AI-agent identities.
February 5, 2026
Next-generation NextWave announced — enhanced margins, deal velocity via CPQ and automatic deal registration, and the new Partner Development Fund.
January 29, 2026
Chronosphere acquisition closed at $3.35B — brand retained. Telemetry Pipeline natively integrated into Cortex XDL 2.0 for 30%+ noise reduction.