Call a Specialist Today! 844-294-0778
Professional Services
Certified professional services
Expert implementation and configuration support from certified engineers ensures every deployment meets security objectives from day one. Reduce risk, accelerate time to value, and gain confidence in the security posture of every platform.
Request a quote View pricingEnd-to-end security implementation support
Certified engineers bring deep platform expertise to every engagement, ensuring deployments are completed on schedule, configured to best-practice standards, and optimized for the target environment.
Accelerated deployment
Shorten time to protection with structured implementation methodologies that move from planning through production in defined engagement windows.
Risk reduction
Minimize exposure through expert planning, validated configurations, and quality execution that addresses security requirements from the initial deployment.
Expert guidance
Gain confidence in the deployment process with certified engineers who bring hands-on experience across Palo Alto Networks, Okta, and Infoblox platforms.
Service engagement pricing
Flexible pricing tiers support engagements of any scope, from targeted half-day assessments to multi-week deployment projects.
Per hour
Billed hourly for targeted tasks and ad hoc support requirements.
Half day (4 hours)
Ideal for health checks, assessments, and focused configuration tasks.
Full day (8 hours)
Structured engagement days for configuration, remediation, and deployment work.
Basic configuration services
Structured configuration engagements deliver production-ready deployments across firewall, management, endpoint, access, identity, and DDI platforms.
PA and VM-Series firewall
Basic configuration services for next-generation firewall platforms, scoped by model complexity.
| VM50 / PA-220 / PA-800 | 2 days |
| VM100-300 / PA-3200 | 3 days |
| VM500+ / PA-5200 | 3 days |
| PA-7000 Series | 10+ days |
Panorama
On-premises or cloud-based centralized management configuration for multi-firewall environments.
Engagement: 1 day
Cortex XDR Prevent
Endpoint protection deployment including agent rollout, policy configuration, and initial tuning.
Engagement: 2 days
Prisma Access
Cloud-delivered security configuration for remote users and branch locations with policy setup and connectivity validation.
Engagement: 3 days
Okta Silver
Identity and access management configuration including directory integration, SSO setup, and MFA policies.
Engagement: 2 days
Infoblox DDI
DNS, DHCP, and IP address management configuration for core network infrastructure services.
Engagement: 2 days
Best practice assessment services
Identify configuration gaps, validate security posture, and remediate findings against vendor-recommended best practices.
PA-Series health check
Initial consultation to discuss current firewall issues, review security configurations, and run the Palo Alto Networks Best Practice Assessment (BPA) with a full report review.
Engagement: 4 hours
BPA remediation
Address findings from the Best Practice Assessment with targeted configuration changes to align the firewall deployment with recommended security standards.
Engagement: 1 day
Okta health check
Review identity management configuration, evaluate policy alignment, and identify areas for improvement across the Okta deployment.
Engagement: half day
Infoblox Threat Defense
Deploy and configure Infoblox Threat Defense capabilities to extend DNS-layer security across the network infrastructure.
Engagement: 1 day
Advanced and a la carte services
Extend any base configuration engagement with specialized add-on services for advanced licensing features, cloud deployments, and platform integrations.
Public cloud deployment
Extended configuration time for public cloud firewall deployments including cloud-specific networking and security group setup.
+1 day
Decryption
Certificate creation, configuration deployment, and basic decryption policy setup for SSL/TLS inspection.
+half day
GlobalProtect
Remote access VPN setup including certificate configuration, LDAP or RADIUS authentication, and security policy changes.
+half day
Site-to-site VPN
Configuration and deployment of a minimum of two VPN tunnels, including time for troubleshooting and validation.
+half day
SD-WAN
WAN optimization configuration and deployment with troubleshooting time included for path selection and failover validation.
+half day
IoT security
Policy creation for IoT device learning, classification, and enforcement across the network environment.
+half day
App-ID migration
Fine-tune or migrate existing firewall configurations to leverage application-based policy enforcement.
+3 days
DLP deployment
Data loss prevention policy creation for the protection of sensitive information across network traffic flows.
+1 day
Okta add-ons
Additional authentication domains or application integrations extending the base Okta configuration.
+half day
Infoblox DDI integration
Active Directory domain, DNS, and DHCP integration with the Infoblox DDI platform.
+2 days
Managed firewall services
Firewalls are the first line of defense against external and internal threats. Properly managed firewalls deliver stronger protection. Managed Firewall Services ensure that every firewall is configured correctly, maintained continuously, and monitored around the clock.
Engineering support
Ongoing firewall engineering support covering operational reporting and periodic posture reviews.
- Traffic and applications report
- URL category detection report
- User activity correlation and analysis
- Intrusion detection report
- Quarterly review and analysis
System management and updates
Continuous system administration covering configuration, licensing, and policy management.
- Offsite configuration backup
- Annual software and licensing updates
- Firewall ruleset changes
- SSH key management
- VPN tunnel additions and changes
- Anti-virus and content filter management
- Application management control
- SDN service management
Monitoring and alerting
Continuous monitoring services ensuring firewall availability and rapid incident awareness.
- 24x7x365 monitoring and alerting
- Hosted access to vendor management platform
- Wide-area circuit monitoring for WAN failures
Service requirements
The following manufacturer contracts must remain active for the duration of the Managed Firewall Service agreement.
- Next-business-day hardware replacement
- Security updates subscription
- Firewall firmware updates subscription
Request a service quote
Connect with a certified services specialist to scope an engagement, discuss deployment requirements, and receive a detailed quote.