SSE Engineer study guide
SSE Engineer · Work through your exam, one topic at a time.
The SSE Engineer credential is listed by Palo Alto Networks as "PCSSE" and "Palo Alto Networks Certified Security Service Edge Engineer" in our exam catalogue. It targets engineers who design, deploy, and operate Security Service Edge (SSE) controls, with Prisma Access as the principal product family in scope. The exam is expected to test four connected skill areas: SSE fundamentals and zero-trust concepts; Prisma Access configuration and deployment; connectivity and routing (remote networks, service connections, and how traffic reaches the cloud security processing nodes); and security policy with threat prevention. A fifth area covers operations, monitoring, and troubleshooting - the day-two work of reading logs, validating tunnels and routing, and isolating policy versus connectivity faults. The SSE Engineer study guide has 5 sections and about 1,788 words.
01Security Service Edge Fundamentals
Security Service Edge is the security half of SASE. It bundles Secure Web Gateway, CASB, ZTNA and Firewall-as-a-Service into one cloud-delivered enforcement point, with DLP, DNS security and decryption as supporting services.
384 words, about 2 min02Prisma Access Configuration and Deployment
Configuration lives in Strata Cloud Manager, with the older Panorama plugin still used in some estates. Field names and workflows differ between the two, so know which one the scenario describes before answering.
353 words, about 2 min03Prisma Access Connectivity and Routing
Every flow has an ingress and an egress. A branch tunnel terminates at a nearby compute location; from there traffic goes to the internet locally, back through a service connection to a data center, or onward for a private application.
367 words, about 2 min04Security Policy and Threat Prevention
Two rulebases, evaluated in order. The decryption policy decides what is decrypted using SSL forward proxy, a forward-untrust certificate and a decryption profile that controls unsupported versions and cipher suites.
338 words, about 2 min05Operations, Monitoring, and Troubleshooting
There is no customer-accessible firewall CLI on Prisma Access infrastructure. You troubleshoot from Strata Cloud Manager - Insights, Command Center, Alerts - and from Strata Logging Service.
346 words, about 2 min