* [Blog](https://www.paloaltonetworks.com.au/blog)
* [Palo Alto Networks](https://www.paloaltonetworks.com.au/blog/corporate/)
* [Service Providers](https://www.paloaltonetworks.com.au/blog/category/service-providers/)
* MSSP Benefits from the Sm...

# MSSP Benefits from the Small Menu Model: Repeatability and Next-Generation Firewalls

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2017%2F05%2Fsp-mssp-benefits-small-menu-model-repeatability-next-generation-firewalls%2F)  
[](https://twitter.com/share?text=MSSP+Benefits+from+the+Small+Menu+Model%3A+Repeatability+and+Next-Generation+Firewalls&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2017%2F05%2Fsp-mssp-benefits-small-menu-model-repeatability-next-generation-firewalls%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.paloaltonetworks.com.au%2Fblog%2F2017%2F05%2Fsp-mssp-benefits-small-menu-model-repeatability-next-generation-firewalls%2F&title=MSSP+Benefits+from+the+Small+Menu+Model%3A+Repeatability+and+Next-Generation+Firewalls&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www.paloaltonetworks.com.au/blog/2017/05/sp-mssp-benefits-small-menu-model-repeatability-next-generation-firewalls/&ts=markdown)  
\[\](mailto:?subject=MSSP Benefits from the Small Menu Model: Repeatability and Next-Generation Firewalls)  
Link copied  
By [Scott Shoaf](https://www.paloaltonetworks.com/blog/author/scott-shoaf/?ts=markdown "Posts by Scott Shoaf")  
May 03, 2017  
4 minutes  
[Service Providers](https://www.paloaltonetworks.com/blog/category/service-providers/?ts=markdown)  
[managed security](https://www.paloaltonetworks.com/blog/tag/managed-security/?ts=markdown)  
[Managed Security Service Provider](https://www.paloaltonetworks.com/blog/tag/managed-security-service-provider/?ts=markdown)  
[MSSP](https://www.paloaltonetworks.com/blog/tag/mssp/?ts=markdown)

Cybersecurity is highly dynamic and increasingly complex. For a managed security service provider (MSSP), selling cybersecurity goes well beyond buying or selling a yearly mobile plan, internet bandwidth or cloud storage. New attack vectors and protections keep cycling like a game of Whac-a-Mole®. Maybe it's ransomware today and botnets tomorrow. Phrases like *phishing campaign* , *malware distribution* , *endpoint* *exploitation* and *command and control* create a new, more sophisticated lexicon.

The challenge for the [MSSP](https://www.paloaltonetworks.com/partners/managed-security-services-provider-program) is to take this complexity, make it simpler and more cost-effective, and provide preventative security to a broader and less-knowledgeable customer base. Doing this enables MSSPs to offer a transactional sales model to a larger number of customers alongside heavy, consultative engagements with select customers.

How to accomplish this? Enter the concept of repeatability. Repeatability allows MSSPs to scale the sales and post-sales processes to capture more sales and serve a larger portion of the market in a cost-effective manner.

Using the below customer engagement framework for security solutions, what can be done here to introduce repeatability?

[](https://www.paloaltonetworks.com/blog/wp-content/uploads/2017/05/repeatability_1.png)  
[![repeatability\_1](https://www.paloaltonetworks.com/blog/wp-content/uploads/2017/05/repeatability_1.png)](https://www.paloaltonetworks.com/blog/wp-content/uploads/2017/05/repeatability_1.png)

Borrowing from the restaurant world, the easy answer is: a small menu. Instead of a long list of *a la carte* options, the MSSP presents their customer with a few selections based on preset, best-practice options. The model is now "Do you want option A or option B?" instead of "What kind of security do you want?" It's a subtle change, but one that can have tremendous go-to-market benefits, such as easing sales complexity and cost.

Let's use [the Next-Generation Security Platform](https://www.paloaltonetworks.com/products/designing-for-prevention/security-platform?) as a basis to detail the benefits of this model. The blend of preventative security subscriptions, a single operating system, and an array of underlying platform options creates a simple set of building blocks that can be readily mapped into the MSSP customer engagement framework model:

1. **Sell**  
   With a small, fixed menu of choices, it becomes easier to train the sales teams on key value points for the service. It also becomes easier for less technical customers to understand the value of the service and pricing.

2. **Deploy**  
   A modest offering with small, medium and large platforms can be readily installed or instantiated with well-understood performance and scaling criteria. Selecting the platform becomes independent of the posture choices: You get "the same security everywhere," regardless of the capacity or physical/virtual form factor.

3. **Posture**  
   At the time of deployment, security configurations are immediately applied to the firewall without prolonged customization efforts. Subscription license cost is known in advance to ensure reliable pricing models.

4. **SOC**  
   As customers cluster to similar sets of security configurations, logging establishment and threat monitoring become more consistent. As issues arise, security best practices, including cross-customer updates and communications, are simplified as compared to expansive one-off situations.

5. **Support**  
   Similar to sales and SOC stages, it becomes easier to target training requirements and best practices for customers using preset and common configurations. Trouble resolution, even prescriptive measures, is more predictable across a large set of deployments.

An action plan checklist begins to form detailing not only the service offering definition but also key items needed for service readiness. These can include marketing materials, sales/support training, pricing models, SOC logging and support alerts. All of these items are captured and completed before the service goes live.

Notice that even if a key focus for the MSSP and repeatability is getting each customer up and running in the fastest and most efficient way possible, the MSSP is still providing preventative security based on the selected service tier.

MSSP customers can now proudly claim that they are preventing a successful *phishing campaign* from *distributing malware* to *exploited endpoints* that would attempt to establish *command and control* channels to attackers. All of this with a rapid deployment model that doesn't require extensive consultations.

To learn more about Palo Alto Networks Managed Security Service Provider Program, please visit the [NextWave MSSP Partner page](https://www.paloaltonetworks.com/partners/managed-security-services-provider-program).

*** ** * ** ***

[**Register for Ignite '17 Security Conference**](http://go.paloaltonetworks.com/ignite2017)  
*Vancouver, BC June 12--15, 2017*

Ignite '17 Security Conference is a live, four-day conference designed for today's security professionals. Hear from innovators and experts, gain real-world skills through hands-on sessions and interactive workshops, and find out how breach prevention is changing the security industry. Visit the [Ignite website](http://www.paloaltonetworksignite.com/) for more information on tracks, workshops and marquee sessions.

*** ** * ** ***

## Related Blogs

### [Partner Integrations](https://www.paloaltonetworks.com/blog/sase/category/partner-integrations/?ts=markdown)

[#### Cloud-Delivered Security: The Best Deal for MSSPs and Organizations Alike](https://www.paloaltonetworks.com.au/blog/sase/cloud-delivered-managed-security/)

### [Partner Integrations](https://www.paloaltonetworks.com/blog/sase/category/partner-integrations/?ts=markdown), [Secure the Cloud](https://www.paloaltonetworks.com/blog/category/secure-the-cloud/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown), [Service Providers](https://www.paloaltonetworks.com/blog/category/service-providers/?ts=markdown)

[#### 5 Reasons Why You Should Consider Cloud-delivered Managed Security](https://www.paloaltonetworks.com.au/blog/2020/06/cloud-delivered-managed-security/)

### [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown), [Service Providers](https://www.paloaltonetworks.com/blog/category/service-providers/?ts=markdown)

[#### Cooperation and Collaborative Partnerships are Key to Protect Businesses](https://www.paloaltonetworks.com.au/blog/2020/05/network-cooperation/)

### [5G Security](https://www.paloaltonetworks.com/blog/network-security/category/5g-security/?ts=markdown), [Public Sector](https://www.paloaltonetworks.com/blog/category/public-sector/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown), [Service Providers](https://www.paloaltonetworks.com/blog/category/service-providers/?ts=markdown)

[#### The Right Approach to Securing 5G](https://www.paloaltonetworks.com.au/blog/2020/05/network-securing-5g/)

### [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown), [Service Providers](https://www.paloaltonetworks.com/blog/category/service-providers/?ts=markdown)

[#### Do MSSPs Have What it Takes to Win Today's Cybersecurity War?](https://www.paloaltonetworks.com.au/blog/2020/03/network-mssps/)

### [Service Providers](https://www.paloaltonetworks.com/blog/category/service-providers/?ts=markdown)

[#### Understanding the Automator's Dilemma in Security](https://www.paloaltonetworks.com.au/blog/2017/12/sp-understanding-automators-dilemma-security/)

### Subscribe to the Blog!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www.paloaltonetworks.com.au/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language