* [Blog](https://www2.paloaltonetworks.com/blog)
* [Network Security](https://www2.paloaltonetworks.com/blog/network-security/)
* [Network Perimeter](https://www2.paloaltonetworks.com/blog/network-security/category/network-perimeter/)
* Maximize Your Security RO...

# Maximize Your Security ROI: 2021 Forrester Consulting TEI Study

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fmaximize-your-security-roi-forrester-tei%2F)  
[](https://twitter.com/share?text=Maximize+Your+Security+ROI%3A+2021+Forrester+Consulting+TEI+Study&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fmaximize-your-security-roi-forrester-tei%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fnetwork-security%2Fmaximize-your-security-roi-forrester-tei%2F&title=Maximize+Your+Security+ROI%3A+2021+Forrester+Consulting+TEI+Study&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/network-security/maximize-your-security-roi-forrester-tei/&ts=markdown)  
\[\](mailto:?subject=Maximize Your Security ROI: 2021 Forrester Consulting TEI Study)  
Link copied  
By [Forrester Consulting](https://www.paloaltonetworks.com/blog/author/forrester-consulting/?ts=markdown "Posts by Forrester Consulting")  
Feb 03, 2021  
5 minutes  
[Network Perimeter](https://www.paloaltonetworks.com/blog/network-security/category/network-perimeter/?ts=markdown)  
[News \& Events](https://www.paloaltonetworks.com/blog/sase/category/news-events/?ts=markdown)  
[Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown)  
[Forrester](https://www.paloaltonetworks.com/blog/tag/forrester/?ts=markdown)  
[Machine Learning](https://www.paloaltonetworks.com/blog/tag/machine-learning/?ts=markdown)  
[next-generation firewall](https://www.paloaltonetworks.com/blog/tag/next-generation-firewall/?ts=markdown)  
[NGFW](https://www.paloaltonetworks.com/blog/tag/ngfw/?ts=markdown)  
[SASE](https://www.paloaltonetworks.com/blog/tag/sase/?ts=markdown)  
[SD-WAN](https://www.paloaltonetworks.com/blog/tag/sd-wan/?ts=markdown)  
[Secure access service edge (SASE)](https://www.paloaltonetworks.com/blog/tag/secure-access-service-edge/?ts=markdown)  
[Virtualized Next-Generation Firewall](https://www.paloaltonetworks.com/blog/tag/virtualized-next-generation-firewall/?ts=markdown)  
[VM-Series](https://www.paloaltonetworks.com/blog/tag/vm-series/?ts=markdown)

Recent data breaches and cybersecurity events impacting the global community have placed a spotlight on corporate and government IT security teams and renewed scrutiny on the policies and practices that keep sensitive data out of the hands of cybercriminals and other bad actors. Reducing costs, achieving a rapid return on investment (ROI), and increasing security and IT operations efficiency for better business outcomes are all typical mandates for cybersecurity investments, but if the investment does not ultimately improve organizational security, are those other goals relevant? Decision-makers should also consider unifying to a central platform, enabling automation, and leveraging cloud-delivered services for real-time protection to ensure that any new solution is good for both the business and for the bottom line.

## ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2021/02/forrester-RGB_logo.jpg)

Palo Alto Networks commissioned Forrester Consulting to conduct a [Total Economic Impact™ (TEI) study](https://start.paloaltonetworks.com/2021-forrester-tei-report-network-security.html) to examine the value that enterprises could achieve by deploying [Palo Alto Networks for network security](https://www.paloaltonetworks.com/network-security) and [SD-WAN](https://www.paloaltonetworks.com/cloudgenix-sd-wan). The TEI goes beyond the traditional total cost of ownership (TCO) and ROI analyses by incorporating risk and potential strategic impact into the business case quantification and analysis.

For this study, Forrester spoke with nine business decision-makers and surveyed 133 customers about the benefits, costs, risks, and flexibility of Palo Alto Networks for network security and SD-WAN. These Palo Alto Networks' customers had anywhere from 3,000 to 300,000 employees and represented a range of industries including healthcare, financial services, government, and retail. Based on these customers' experiences, Forrester developed a composite organization for the study and built out a three-year financial model to reflect the costs and benefits of the investment.

## So what were the results?

#### **247% ROI Over Three Years**

Deploying Palo Alto Networks for network security and SD-WAN results in significant financial and organizational benefits for the composite organization. Namely, the organization achieves a **247% return on investment and $40.1 million in benefits with a net present value (NPV) of $28.5 million over three years.** These benefits are spread across nine different categories, including efficiency gains for IT, security, and end users; cost savings from sunsetting legacy technology; and the reduced risk of a data breach.

For full details, join our[**Maximize Your Security ROI in 2021**](http://register.paloaltonetworks.com/maximizeyoursecurityroiin2021?utm_source=social&utm_medium=blog) webcast on February 10.

#### ![](https://www.paloaltonetworks.com/blog/wp-content/uploads/2021/02/2021-Forrester_Infographic.jpg)

#### **Increased Security and IT Operations Efficiency**

As a result of the Palo Alto Networks investment, the composite organization **reduces the number of security incidents requiring manual investigation by 35%, decreases mean-time-to-resolution (MTTR) by 20%, and reduces the number of devices requiring reimaging by 45%, saving $5.1 million over three years** . Palo Alto Networks' [Next Generation Firewalls (NGFWs)](https://www.paloaltonetworks.com/network-security/next-generation-firewall) and [Cloud-Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions) drive these gains, significantly improving visibility into the organization's network and introducing automation capabilities that decrease the number of critical alerts, including false positives. Additionally, the composite reduces MTTR because analysts can now view all the data they need in a single dashboard. With enhanced protection from the same Security Services, the composite organization experiences fewer malware infections and other issues with devices, again reducing workload for the IT operations team.

#### **Data Breach Risk Reduction by 45%**

The composite organization **decreases the likelihood of a data breach by 45% after three years** by deploying a [Zero Trust](https://www.paloaltonetworks.com/network-security/zero-trust) security architecture and applying consistent security policies across the entire organization using [Panorama](https://www.paloaltonetworks.com/network-security/panorama) centralized management. Cloud-Delivered Security Services supplements the existing SecOps team by adding 24/7 monitoring and vulnerability and threat prevention and supporting up-to-the-second protection from zero-day threats with [WildFire](https://www.paloaltonetworks.com/products/secure-the-network/wildfire).

#### **More Than $10M in Cost Savings**

The composite organization realizes two additional quantifiable benefits from deploying Palo Alto Networks' NGFWs and Cloud-Delivered Security Services that are reflected in the financial model. First, the composite org saves **$9.9 million from sunsetting and rationalizing legacy security solutions and infrastructure.** Second, it **reallocates seven full-time security and IT professionals away from platform and solution management**to higher-value, more impactful projects and roles saving $1.9 million over three years.

Forrester quantified five additional benefits associated with deploying Palo Alto Networks for network security and SD-WAN. For more details on the benefits above and additional quantified and unquantified benefits found in the study, please review the [full study](https://start.paloaltonetworks.com/2021-forrester-tei-report-network-security.html) or the product-focused spotlights for [Cloud-Delivered Security Services](https://start.paloaltonetworks.com/forrester-tei-subscriptions-spotlight), [Prisma Access](https://start.paloaltonetworks.com/forrester-tei-prisma-access-spotlight.html), and [SD-WAN](https://start.paloaltonetworks.com/tei-spotlight-sd-wan.html).

#### **$28.5M In NPV Based on Improved Security, Efficiency and Productivity**

To calculate NPV, Forrester noted four separate cost categories associated with the Palo Alto Networks investment. The categories included installation and deployment costs, training for ongoing management, Palo Alto Networks costs (hardware, licensing, etc.), and SD-WAN deployment costs. These costs total $11.5 million over three years versus $40.1 million in benefits for a net-present value of $28.5 million --- a significant financial benefit.

Learn more about how deploying Palo Alto Networks for network security and SD-WAN can significantly improve organizational security posture and modernize security operations and management in a February 10th webcast,[**Maximize Your Security ROI in 2021**](http://register.paloaltonetworks.com/maximizeyoursecurityroiin2021?utm_source=social&utm_medium=blog). Join guest speakers from Forrester Consulting and the State of North Dakota as they discuss the costs, benefits, and risks of security investments and provide examples of successful outcomes.

*The Total Economic Impact™ of Palo Alto Networks For Network Security and SD-WAN, a commissioned study conducted by Forrester Consulting on behalf of Palo Alto Networks, January 2021.*

*** ** * ** ***

## Related Blogs

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Hybrid Cloud Data Center](https://www.paloaltonetworks.com/blog/network-security/category/hybrid-cloud-data-center/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### New: The Industry's Most Flexible Software NGFW Consumption Model](https://www2.paloaltonetworks.com/blog/2021/02/netsec-flexible-firewall-licensing/)

### [5G Security](https://www.paloaltonetworks.com/blog/network-security/category/5g-security/?ts=markdown), [Hybrid Cloud Data Center](https://www.paloaltonetworks.com/blog/network-security/category/hybrid-cloud-data-center/?ts=markdown), [Network Perimeter](https://www.paloaltonetworks.com/blog/network-security/category/network-perimeter/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown)

[#### Why Sacrifice One Vital Cloud Network Security Need for Another?](https://www2.paloaltonetworks.com/blog/network-security/netsec-choosing-virtual-firewalls/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Secure the Enterprise](https://www.paloaltonetworks.com/blog/category/secure-the-enterprise/?ts=markdown)

[#### PAN-OS 10.0 for the World's First ML-Powered NGFW Now Available](https://www2.paloaltonetworks.com/blog/2020/07/network-ml-powered-ngfw/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown)

[#### See How VM-Series Virtual Firewalls Pay for Themselves](https://www2.paloaltonetworks.com/blog/network-security/forrester-spotlight-ngfw/)

### [Announcement](https://www.paloaltonetworks.com/blog/category/announcement/?ts=markdown), [Company \& Culture](https://www.paloaltonetworks.com/blog/category/company-culture/?ts=markdown), [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### VM-Series Virtual Firewalls Beat Fortinet Fortigate in Miercom Testing](https://www2.paloaltonetworks.com/blog/2023/03/vm-series-virtual-firewalls-in-miercom-testing/)

### [Next-Generation Firewalls](https://www.paloaltonetworks.com/blog/network-security/category/next-generation-firewalls/?ts=markdown), [Products and Services](https://www.paloaltonetworks.com/blog/category/products-and-services/?ts=markdown)

[#### Palo Alto Networks Secures Nutanix Cloud Clusters for Microsoft Azure](https://www2.paloaltonetworks.com/blog/2022/11/nutanix-cloud-clusters-for-microsoft-azure/)

### Subscribe to Network Security Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language