A refresh proposed with the renewal
Renewals often arrive with a recommendation to move to newer hardware. The refresh and the subscription renewal are priced together, which makes each harder to judge.
How Palo Alto Networks prices an enterprise deal
Palo Alto Networks sells across three platforms. Strata covers network security, with firewall hardware and software firewalls plus subscriptions such as threat prevention, URL filtering and DNS security. Prisma covers SASE and cloud security, typically priced per user or per resource. Cortex covers security operations, including XDR priced per endpoint and XSIAM.
Large customers often buy through an enterprise license agreement that bundles subscriptions across products for one to five years. Hardware is priced from list with negotiated discounts, and support is priced on top.
Palo Alto Networks' fiscal year ends July 31, and its fourth quarter runs from May to July.
What has changed recently
- 2025 to 2026
Platformization accelerates
Palo Alto keeps pushing customers to consolidate network, cloud and security operations onto its platforms, with multi-product deals priced accordingly.
- 2026
Identity joins the platform
The CyberArk acquisition brings identity security into the Palo Alto portfolio.
- 2026
Memory costs pressure hardware
Rising memory and component costs are putting pressure on firewall hardware prices across the market.
- 2026
AI across the platform
Palo Alto is building AI into its products and adding AI security offerings, priced as subscriptions.
What moves a Palo Alto Networks renewal
Several things move the number at once.
HardwareFirewall models and refresh timing
SubscriptionsSecurity services attached to each device or user
PlatformHow many products sit under one agreement
SupportPriced on top of hardware and software
Each of these changes what the business actually pays. Knowing which one is moving the number is the starting point.
Where a Palo Alto Networks renewal gets expensive
Subscriptions on every device
Security subscriptions attach to each firewall. Devices that are being retired or underused still carry them.
A platform deal sized to the pitch
Consolidating onto more products can lower the unit price and raise the total. Products added for the discount renew with everything else.
Support that follows the list price
Support is priced on top. When hardware or subscription prices rise, support usually does too.
Every time I have an opportunity to engage, I contact Deal IQ and within minutes they respond, immediately we're up and running.
A POSITION, NOT A FLOOR
A platform discount is a position. It isn't the floor.
Consolidation deals are built to look better than buying each product separately. Whether they are the best available price for the business is a separate question.
What well-prepared buyers do before a Palo Alto Networks renewal
Start 6 to 12 months out
Hardware refresh, subscriptions and support usually land together.
Map devices and subscriptions
Know what is attached to what, and what is being retired.
Separate refresh from renewal
Understand the cost of each on its own terms.
Know which platform products you use
Before adding more to the agreement.
Know where you fall in Palo Alto's year
Its fiscal year ends July 31. May to July is when it closes its year.
DEAL IQ ON PALO ALTO NETWORKS
We know how Palo Alto Networks decides.
Palo Alto Networks’s list prices and packaging tell you where a deal starts. What it should cost is not published. Our network of 350+ former vendor sales, pricing and deal desk leaders includes people who sold Palo Alto Networks and know how those numbers are put together. We pair that with our own pricing data and a 32-factor assessment on every deal, then negotiate directly with Palo Alto Networks or behind the scenes with your team.
Savings come from the price. Same products, same quantities, same scope.
DEAL IQ EXPERIENCE WITH PALO ALTO NETWORKS
90+Palo Alto Networks negotiations
$175M+in Palo Alto Networks contract value negotiated
350+former vendor sales, pricing and deal desk leaders in our expert network, including people who sold Palo Alto Networks
Frequently asked questions
How does Palo Alto Networks price enterprise deals?
Across three platforms: Strata for network security, Prisma for SASE and cloud security, and Cortex for security operations. Hardware, subscriptions and support are priced separately, often combined in an enterprise license agreement.
What is Palo Alto platformization?
Palo Alto's strategy of consolidating a customer's security spend onto its platforms, with multi-product deals priced as a package.
When is Palo Alto Networks' fiscal year end?
July 31. Its quarters end October 31, January 31, April 30 and July 31.
DEAL IQ IN NUMBERS
$20B+contract value negotiated
3,000+negotiations
100Net Promoter Score
4.7/5client rating for delivering savings
$0fee if there are no savings
NPS and rating from independent client research by Plural Strategy Group, 2026.What our clients say →