Consigas
Training & Courses
Network Security
  • Firewall: Configuration and Management (EDU-210)
  • Panorama: NGFW Management
  • Firewall: Troubleshooting (EDU-330)
  • Firewall Security Best Practices and Threat Prevention (EDU-214)
SASE and Cloud Security
  • Prisma Access SSE: Configuration and Deployment
  • Prisma Browser
  • Panorama: Centralized Network Security Administration
  • Prisma SD-WAN: Design and Operation
Security Operations
  • Cortex XSIAM: Security Operations, Integration, and Automation
  • Cortex XSIAM: Investigation and Analysis
  • Cortex XDR: Security Operations and Integration
  • Cortex XDR: Investigation and Analysis
  • Cortex XSOAR: Engineering Security Automation Solutions
Lab RentalView all courses
CertificationsConsultingBest Practices
About Us
Our storyOur instructorsRecognition and credentialsWhat learners sayNews
Contact
Course Dates & Prices
Network Security
Firewall: Configuration and Management (EDU-210)Panorama: NGFW ManagementFirewall: Troubleshooting (EDU-330)Firewall Security Best Practices and Threat Prevention (EDU-214)
SASE and Cloud Security
Prisma Access SSE: Configuration and DeploymentPrisma BrowserPanorama: Centralized Network Security AdministrationPrisma SD-WAN: Design and Operation
Security Operations
Cortex XSIAM: Security Operations, Integration, and AutomationCortex XSIAM: Investigation and AnalysisCortex XDR: Security Operations and IntegrationCortex XDR: Investigation and AnalysisCortex XSOAR: Engineering Security Automation Solutions
Lab RentalView all courses
CertificationsConsultingBest Practices
About Us
Our storyOur instructorsRecognition and credentialsWhat learners sayNews
ContactCourse Dates & Prices
Palo Alto NetworksCortex XSIAMXSIAM-E

Cortex XSIAM: Security Operations, Integration, and Automation

Engineer Cortex XSIAM for modern security operations: data onboarding and integrations, detection rules and analytics, automation playbooks, and operationalising the AI-driven SOC platform.

Duration
3 Days
Delivery
Live instructor-led
Format
Online or classroom
Learner rating
4.48/5397 Course reviews

Not ready to choose a date?

Reserve for free→

Next available class

Scheduled class

Oct 26 - Oct 28, 2026

XSIAM-E · Live instructor-led training

Format
Live online
Language
English
Schedule
3x full-day sessions9.00am-5.00pm US Mountain Time
Course price from
€1.500 EURor 18 credits
View all dates & prices

Choose a date to register. Sold-out classes offer Request Seat.

What you will be ready to do

Get hands-on with the official Palo Alto Networks curriculum.

  • Work through guided, hands-on labs on your own dedicated instance.
  • Apply configuration best practices from real projects.
  • Understand how the platform components work together.
  • Troubleshoot common issues with a structured approach.
Palo Alto Networks Authorized Global Training Partner
Course agenda ↓
OverviewWho it’s forWhat you’ll learnCourse contentReviews

Who it’s for

Is XSIAM-E the right course?

Designed for

SOC engineers and architects responsible for implementing, integrating, and automating Cortex XSIAM.

Prerequisites

Basic networking knowledge is recommended. No prior Palo Alto Networks experience is required unless stated for advanced courses.

Ask for course advice →

Included

Video Recordings

Video recordings are included as a standard student benefit, so you can revisit demos and complex topics after the class.

Included

Lab Access for 3 month

You work in your own dedicated lab during the training week. FireWall courses include 3-month extended lab access after the class.

Course authority

Official curriculum

Official Palo Alto Networks curriculum

Course content

Verify the curriculum before you choose a class.

Learn by doing in a dedicated lab. Every module pairs theory with lab time, so you practise each step the way you would on the job. The pace suits engineers who are new to the platform as well as administrators who want to close gaps and adopt best practices across their deployment.

Best Practices & real Life Experience+

Your instructor brings years of real-world Palo Alto Networks project experience into the classroom and shares field-proven best practices throughout the course.

Certification+

This course supports the matching Palo Alto Networks certification path. Ask our training team which exam and preparation route fits your goals.

Scope+

The course follows the official Palo Alto Networks curriculum for the version listed in the schedule.

FAQ+

Questions about formats, time zones, payment options, or team training? Contact the training team at training@consigas.com.

Genuine learner feedback

Students Love Our Instructors

4.48 out of 5★★★★★ Based on 397 course reviews Featured learner reviews · Reviews collected via Reviews.io ↗ View the complete Consigas profile on Reviews.io (opens in a new tab).

Aqueena Alexander at ServiceNow

Los Angeles, US · June 2025

✓Verified via Reviews.io

★★★★★
“The course was very insightful, as this may be implemented soon in my day to day activites it was useful knowledge. The platform itself is very easy to use and the GUI provides a combined approach to many different functionalities

Ryan Warner at Asante

Grants Pass, US · August 2025

✓Verified via Reviews.io

★★★★★
“Great hands on course, so much better than just book work.

Saurabh Singh at Infosys

New Delhi, IN · August 2025

✓Verified via Reviews.io

★★★★★
“The Cortex XSIAM Engineer training was well-structured and delivered in a format that balanced theoretical foundations with extensive hands-on labs. The instructor explained advanced security operations concepts like SIEM, SOAR automation, and threat detection with impressive clarity and depth. Real-world examples from current cybersecurity incidents kept the sessions practical and relevant to daily SOC workflows. Interactive labs and live demonstrations allowed for genuine skill-building, while the instructor’s approachable and patient style fostered open questions and in-depth discussions.

Anonymous

Atlanta, US · March 2026

✓Verified via Reviews.io

★★★★★
“The course was a great introductory course to Cortex XSIAM for a SIEM Engineer. I learned some things that will help me in my role while deploying this new SIEM in our environment.

Benjamin Murray at Resolution Life

United States · February 2025

✓Verified via Reviews.io

★★★★★
“This class (besides the intro material) covered an overview of the coursework, expectations, lab work for the upcoming lecture. This class covered elements of a SOC, maturity model, agent deployment and configuration and provided additional Ebook for more insight into the topic. Additionally, this course covered, data source ingestion, visibility, data models, analytics, alerting & detection, ASM, automation and incident handling from the SOC. The labs were hands on and technical and covered aspects of the initial configuration of the instance from profile and policy creation to creating dynamic and static lists as well has labs covering BrokerVMs and additional capabilities of ingestion logs.

Wilfredo Silva at Deloitte

United States · July 2025

✓Verified via Reviews.io

★★★★★
“The course is really great, however I want to point out that there should be more time grantes to perform the labs if possible 2 or 3 weeks, because then we can have enough hands on time to put to practice the theory that we learn and that helps to gather more knowledge on the use of XSIAM.

Page 1 of 2

Course agenda

Explore the complete Cortex XSIAM: Security Operations, Integration, and Automation agenda.

The “Cortex XSIAM: Security Operations, Integration, and Automation” course covers the following content.

Select a module to see its topics and lab activities.

01Course Introduction+
  • Welcome and Introductions
  • Intended Audience and Course Focus
  • Course Objectives and Agenda
  • Lab Topology
02Overview of Cortex XSIAM+
  • Overview of XSIAM
  • Features and Functionalities
  • Problems XSIAM Solves
03Software Components+
  • Agents
  • XDR Collectors
  • PANW NGFW
  • Broker VM
  • Engines
  • Cloud Identity Engine
04XQL+
  • Introduction and Overview of XQL
  • XQL Components
  • Parsing
  • Data Models
05Detection Engineering+
  • Custom IOCs/BIOCs
  • Correlation Rules
06Integrations+
  • Marketplace
  • Dev/Prod
  • API (Ingestion)
  • API (Automation)
  • Custom
07Automation+
  • Introduction to Automation
  • Marketplace
  • Playbooks
  • Scripts
08Threat Intel Management+
  • TIM Overview
  • Automation and Feed Integrations
  • External Dynamic Lists
  • Jobs
  • TIM Indicator Rules
09Attack Surface Management+
  • Attack Surface Management
  • Attack Surface Rules
  • Attack Surface Testing
10UI Customizations+
  • Fields and Layouts
  • XQL Widgets
  • Dynamic Dashboards

Your next step

Choose the XSIAM-E class that fits your schedule.

Compare dates and prices first. If you are still confirming timing, you can reserve this course for free or ask the training team for advice.

View dates & pricesReserve for freeAsk for course advice →
Consigas

Palo Alto Networks training and consultancy.

Consigas Limited6–9 Trinity StreetDublin, D02 EY47Ireland

Training

  • Training & Courses
  • Course Dates & Prices
  • Certifications

Resources

  • Consulting
  • Best Practices
  • Reviews

Company

  • About Us
  • Contact
  • Become a reseller

Legal

  • Privacy Policy
  • Cookie Policy

© 2026 Consigas Ltd.