Practice
AI Role Plays
for Partners
22 AI Role Play simulations in the PAN Learning Center — dynamic virtual buyers for pressure-testing your discovery calls, competitive displacements, cold calls, and ELA discussions. Each module gives you a persona, context, and objective so you can practice objection handling risk-free. Learning Center login required.
Seller Brief
How the Simulations Work
Each role play drops you into a live conversation with an AI buyer persona who pushes back like a real CISO, CIO, or SOC Director. Work the scenario to its objective — uncover pain, handle objections, and close for the next meeting. Pair these with the Demo Zone learning plans: cover the demo material first, then rehearse the pitch here. Cortex AES (Koi) also has live AI Podium pitch practice inside its demo system.
Category
SASE, Browser & AI Access
ROLE PLAY 01
Securing the AI-Driven Enterprise with Prisma AIRS
Discovery · New Customer
David Thompson · CISO, TechNova Solutions
TechNova is adopting GenAI tools fast but lacks visibility into shadow AI. Position Prisma Access (AIRS) to discover shadow AI usage, secure AI apps, and implement data controls without hindering developer productivity.
Launch Role Play
ROLE PLAY 02
Healthcare Island Compete
Compete DisplacementExisting Customer
Elias Vance · CISO, HealthNet Global
Fragmented Island enterprise browser + legacy proxies in a HIPAA environment. Challenge the fragmented approach and position Prisma Access Enterprise Browser as the unified, clinician-friendly solution.
Launch Role Play
ROLE PLAY 03
Enterprise Browser Security for the Cloud and AI Era
Discovery · New Customer
Elena Rostova · CIO, Global Finance Corp
Remote workforce on unmanaged BYOD devices and third-party contractors. Position Prisma Access Enterprise Browser as the lightweight, secure alternative to cumbersome VDI and complex agents.
Launch Role Play
ROLE PLAY 04
Proactive Competitive Takeout with Prisma Access
Competitive TakeoutNew Customer
Maya Lin · VP of IT Security, OmniLogistics
Rapid global expansion on legacy VPN/proxy (Zscaler) with poor UX and high costs. Displace the legacy stack with Prisma Access — unified security, superior user experience, simplified management.
Launch Role Play
ROLE PLAY 05
Retail Net New Discovery Call
Discovery · New Customer
James Sterling · Director of IT Infrastructure, Global Retail Solutions
Digital transformation across e-commerce and in-store, with cost pressure and peak-season availability demands. Uncover network complexity and security gaps; position the platform as the enabler of secure retail transformation.
Launch Role Play
ROLE PLAY 06
The AI Visibility Quest for Prisma AIRS
Upsell · Existing Customer
Dr. Aris Thorne · Chief Data Officer, Nexus Health Innovations
Heavy AI investment in medical research without visibility into data usage across models. Position Prisma AIRS for complete AI usage visibility and data-protection enforcement without stifling innovation.
Launch Role Play
Category
Cortex & SecOps
ROLE PLAY 07
Cortex Cloud: Wiz Compete
Compete DisplacementExisting Customer
Sarah Jenkins · VP of Cloud Security, FinTech Solutions
Wiz CSPM user drowning in alert fatigue with no active prevention. Challenge agentless-only limitations and position Cortex Cloud as posture management plus active runtime protection.
Launch Role Play
ROLE PLAY 08
Cortex XDR: CrowdStrike Compete
Compete DisplacementExisting Customer
Michael Chang · SOC Director, Global Manufacturing Inc.
CrowdStrike endpoint shop that can't correlate across network and cloud. Highlight endpoint-only limits and position Cortex XDR's stitched endpoint + network + cloud detection and response.
Launch Role Play
ROLE PLAY 09
Discovering the Expanding AI Attack Surface with Koi
Upsell · Existing Customer
Alex Mercer · Head of IT Security, Tech Innovators
Rapid LLM adoption with unknown shadow-AI extent — data leakage and prompt-injection risk. Uncover the expanding AI attack surface and position Koi to secure LLM usage and protect sensitive data.
Launch Role Play
ROLE PLAY 10
Uncovering Pain in Legacy SIEM Accounts
Upsell / Displacement
Robert Davis · CISO, Regional Healthcare Network
Expensive legacy SIEM (Splunk/QRadar): slow searches, complex query languages, ingestion costs. Surface hidden SIEM pain and position Cortex XSIAM as the modern AI-driven SecOps alternative.
Launch Role Play
ROLE PLAY 11
XDR SentinelOne Renewal
Compete DisplacementRenewal Event
Jennifer Wu · Director of IT Security, Mid-Market Retailer
SentinelOne renewal approaching; small team struggling with incident response and visibility beyond the endpoint. Leverage the renewal to position Cortex XDR — superior analytics, broader visibility, automated response.
Launch Role Play
Category
Unit 42 & Strategic Deals
ROLE PLAY 12
Unit 42: Lead with Threat Intelligence to Drive Platformization
Upsell · Existing Customer
Marcus Chen · CISO, Global Dynamics Tech
Assertive, AI-washing-skeptic CISO firefighting a credential breach, with a Board demanding quantifiable outcomes. Disrupt his manual mindset with the 2026 IR Report, uncover shadow-AI identity risks, and secure the follow-up.
Launch Role Play
ROLE PLAY 13
Identify a Managed Services Opportunity
Upsell to Managed Services
Sarah Jenkins · SOC Director, MedTech Health
Stressed SOC Director with alert fatigue and a 100-day Level III analyst vacancy. Uncover talent and operations pain, pivot to Unit 42 Managed Services value, and close for the next appointment.
Launch Role Play
ROLE PLAY 14
Identify a Frontier AI Defense Opportunity
Upsell · Existing Customer
Sarah Smith · CISO, Santana Healthcare
Best-of-breed point solutions, a small siloed SOC, and revenue apps built on open-source code — worried about frontier AI model risks. Uncover AI-model exposure and position PANW as the answer.
Launch Role Play
ROLE PLAY 16
Championing the ELA/ESA Strategic Discussion
Strategic / ELA Deal
Tiberius Styles · CIO, Life Heart Corp.
Visionary CIO facing a procurement freeze with a fragmented stack. Frame the ELA/ESA as operational simplicity and budget optimization — expose point-product hidden costs so he can champion consolidation.
Launch Role Play
Category
Network Security & Cloud
ROLE PLAY 15
Superior Security with Software Firewalls
Upsell · Existing Customer
Mark Doyle · VP of Cloud Infrastructure, Greenfield Global Insurance
"Cloud Native Defender" who calls third-party security legacy thinking and wants a sanity check before a Board presentation. Uncover hidden operational friction to challenge the "native is best" mindset.
Launch Role Play
ROLE PLAY 17
Migration & Modernization with AWS
Upsell / Cloud Migration
Cameron Roberts · CISO, VP Financial
On-prem-rooted CISO in an AWS/SAP shop rolling out customer-facing GenAI chatbots on heavy EKS. Position PANW security for the AWS migration — especially Kubernetes workloads and GenAI deployments.
Launch Role Play
ROLE PLAY 18
NGTS 47-Day Cryptographic Reset Cold Call
Cold Call · New Opportunity
Alex Miller · Director of Infrastructure & Network Security, Global Tech Solutions
Frankenstein stack of 40+ tools and spreadsheet-based certificate tracking as validity shrinks to 47 days. Land a 15-minute meeting for the 47-Day Validity Readiness Dashboard and a 30-day discovery scan.
Launch Role Play
ROLE PLAY 19
NGFW, SCM & CDSS
Compete / UpsellExisting Customer
Claire Irvine-Smith · CISO, Zuk Scientific
Hybrid multi-cloud on aging legacy firewalls; the Director wants a cheap Fortinet refresh, the CISO demands proof. Position NGFW + SCM + CDSS as the integrated platform for HIPAA compliance and operational efficiency.
Launch Role Play
Category
Identity Security
ROLE PLAY 20
Identity Security: Better Together
Cross-sell / Partnership
Conrad Ronan · Head of Infrastructure Security, Aetheria Cloud Systems
Ten-year Strata customer whose org also runs CyberArk PAM. Explain the PANW/CyberArk "Better Together" story and integrated value for dual customers — in a 10-minute conversation.
Launch Role Play
ROLE PLAY 21
Identity Security: Cross-sell
Cross-sell · Existing Customer
Rashida Palmer · CIO, NeoInsurance
Fast-growing fintech that just renewed a 3-year PAM contract; efficiency-obsessed CIO with a hard 15-minute stop. Explore identity gaps beyond PAM to uncover cross-sell opportunities.
Launch Role Play
ROLE PLAY 22
Human Identity Security Net New Account
Net New Account
Chris Miller · IT Manager, Peak Point
Admin-rights malware incident caused a 4-hour production shutdown; BeyondTrust covers legacy servers but not cloud factory software or laptops. Align EPM and PAM to reduce local admin rights, differentiate from BeyondTrust, and secure the follow-up.
Launch Role Play