Palo Alto Networks spent 2025 rebuilding their partner program around a single idea: platformization. They want partners selling the full Palo Alto stack. Not a firewall here and an endpoint license there. The whole thing. For a deeper look at how this fits into their broader partner strategy, see our NexWave evolution vendor view.
For partners, this cuts both ways. Platform deals are larger and stickier. Customers don’t rip out an entire security stack on a whim. But getting there requires deeper technical chops and longer sales cycles. The days of reselling a PA-220 and calling yourself a security partner are over. The broader trend of security overtaking hardware as the channel’s primary revenue driver is accelerating this shift. Palo Alto wants you certified across SASE, XDR, and cloud security. If you’re not, they’ll find someone who is.
The partners going all-in are reporting 30 to 40 percent larger deal sizes. That’s real. But so is the investment to get there. SonicWall took the opposite approach, removing barriers and making it easier for transactional partners to expand into managed security. More certs, more training, more pre-sales resources. You have to decide if Palo Alto is your horse and ride it, or if you’re better off spreading across multiple vendors. Both strategies can work. What doesn’t work is being half-in. The death of the generalist VAR is the same lesson applied at the business level — you have to pick a lane and commit.