Cart
Technology-Focused CCIE Security (3.0) Lab Preparation Workbook (Volume 1) with Detailed Solution Guide
Notice: The Volume 1 Workbook and accompanying Detailed Solution Guide are also part of our CCIE Security 3.0 Blended Learning Self-Study Bundle. Be sure to check out how much more content you can get for a little more money with the Blended Learning Solution.
About Our Volume 1 CCIE Security 3.0 Lab Preparation Workbook
IPexpert's industry-recognized Technology-Focused CCIE Security (3.0) Lab Preparation Workbook (Volume 1) with Detailed Solution Guide is a proven set of workbooks (lab preparation scenarios and detailed solutions) that have been tested, enhanced and is part of the world's most up-to-date training solution available for Cisco's grueling CCIE Security 3.0 Lab exam.
Throughout nearly a decade of leading the CCIE Security training industry, IPexpert has coined the term "Structured Learning Approach" to describe its methodology for maximizing student success. We have developed our learning materials around our proven techniques and over a thousand successful students who have enthusiastically recommended these study techniques to others. Some companies may claim to be experts in this space, but the fact that IPexpert has amassed the world's largest list of successful CCIEs speaks clearly for our record. Let us help you to join this elite group!
Candidates entering the early round of their CCIE Security Lab preparation must master various technologies and protocols before they can begin working on full-scale mock CCIE labs. Therefore, throughout the first phase of your lab preparation, protocol-focused and technology-focused lab scenarios must be mastered to ensure that you gain the complete understanding of both the fundamentals and complex implementations of that challenging protocol or technology. This workbook is the solution that will allow you to master these technologies and protocols. This workbook combination contains 16 complex lab scenarios and extremely detailed solutions on all of the latest topics seen on the 3.0 Security Lab blueprint.
Developed by our highly-decorated team of CCIE Instructors, you can be certain that this workbook combination is the most up-to-date and refined product on the market. The experience you will gain through these hands-on scenarios will serve as an invaluable step toward your CCIE Security success.
Why Choose IPexpert
Enjoying nearly a decade of success and boasting the world's largest list of successful candidates, IPexpert is pleased to offer you the world's most proven, content-rich technology-focused CCIE Security 3.0 Lab preparation workbook. The industry's most recognized workbook and the accompanying solution guide are explained as follows:
- Hundreds of pages full of extremely useful, complex and challenging lab scenarios (some say more challenging than the real lab!)
- A collection of 8 sections (16 labs) that are protocol-focused, current and up-to-date and guaranteed to cover the current lab exam blueprint topics and the troubleshooting that's now seen on the new 3.0 CCIE Security Lab blueprint.
- A training solution with extremely detailed diagrams that are thorough are easy to comprehend
- Designed around a standard topology large enough to change the logical topology without recabling or moving any devices (if home hardware is utilized)
- A phenominal training solution supported by the world's most sophisticated online CCIE Security vRack solution, boasting amazing graphical remote controls to ensure a user-friendly experience
- The most complete training solution in terms of configurations and solutions. You receive the initial (start-up) configurations, making it easy for you to get started on the actual lab exam as well as final configurations, allowing you to check your work against that of the lab Authors
- Thousands of pages (breaking down the task, step-by-step) representing extremely detailed solution walk-throughs consisting of extensive explanation by the industry's most recognized and accredited Instructors and Developers
- Hints, tips and tricks outline what to watch for are explained in detail by the Authors and Instructors that have trained thousands of CCIEs to pass the CCIE Security Lab exam
- An amazing training solution that is kept current by the world's most elite team of technical Instructors, all of which hold multiple certifications, degrees and multiple CCIE certifications
- A comprehensive workbook supported online by the Authors and Developers that thousands of your peers have trusted
- The world's most proven product, boasting more CCIE success stories and testimonials than any other company
- A "must have" training product backed by IPexpert's Investment Assurance program that has raised the bar and set the precidence for training guarantees!
Closing Statements on Why You Should Use IPexpert's Training Solutions
This industry-recognized workbook has been used by over a thousand of your peers as their primary resources used to prepare for the grueling CCIE Security Lab exam. We would like to highlight a few key points you should consider when selecting a CCIE training vendor:
- Which vendor's workbook has been (and is currently) used by more candidates to pass the CCIE Lab exam for each particular track?
- Which vendor includes their full printed solutions (solutions guide, tips, hints, FAQs, verifications, etc) free of charge with the workbook?
- Which vendor's workbooks and overall Structured Learning Approach has been proven, tested and successful for nearly a decade?
- Can you find another vendor that offers the level of support, guidance and authenticity that comes close to IPexpert?
- Which vendor's products have scaled the world and have been delivered to every developed country in the world?
- What vendor can match the level of competency as it relates to our dedicated, full time team of industry-recognized and accredited Authors and Instructors?
IPexpert understands that the CCIE journey is a long process. Our Training Advisors, Support Engineers, Instructors and Developers will stand with you, by your side, during the entire process of your CCIE journey, regardless of how long it takes you!
Table of Contents
At IPexpert, we take great pride in being known as the industry's most up-to-date and thorough Cisco training provider. We guarantee that all training materials we ship to our clients are current and up-to-date, reflecting all of the topics that are outlined on the most recent CCIE Security 3.0 Lab blueprint. If, at any time, you have questions pertaining to our content, we invite you to contact one of our CCIE-focused Training Advisors who will be happy to assist you in creating a customized study plan that fits your learning preferences and your training budget.
Below, you will find the topics, technologies and protocols that are currently included in IPexpert's Technology-Focused CCIE Security 3.0 Lab Preparation Workbook.
- Lab 1A: Configuring secure networks using Cisco ASA Firewalls
- Lab 1B: Troubleshooting secure networks using Cisco ASA Firewalls
- Lab 2A: Implementing secure networks using Cisco IOS Firewalls
- Lab 2B: Troubleshooting secure networks using Cisco IOS Firewalls
- Lab 3A: Implementing secure networks using Cisco VPN solutions
- Lab 3B: Troubleshooting secure networks using Cisco VPN solutions
- Lab 4A: Configuring Cisco IPS to mitigate network threats
- Lab 4A: Troubleshooting Cisco IPS to mitigate network threats
- Lab 5A: Implementing Identity Management
- Lab 5B: Troubleshooting Identity Management
- Lab 6A: Configuring Control Plane and Management Plane Security
- Lab 6B: Troubleshooting Control Plane and Management Plane Security
- Lab 7A: Configuring Advanced Security
- Lab 7B: Troubleshooting Advanced Security
- Lab 8A: Identifying and Mitigate Network Attacks
- Lab 8B: Troubleshooting Misconfigured Network Attack Mitigation
Topology / Hardware
All IPexpert clients have the ability to rent online vRack access through Proctor Labs, our sister company. Proctor Labs is an online CCIE rack solution provider that rents remote access to CCIE students. These CCIE Security vRacks are second-to-none in the CCIE online rack rental industry. The Proctor Labs vRacks are equipped with the latest Cisco hardware, IOS and applications available. These vRacks truly provide an online experience like no other online rack vendor can offer.
All of the Proctor Labs CCIE Security vRacks are structured around IPexpert's standard CCIE Security topology consisting of 13 routers (including Frame Relay switch, Terminal Server and three Backbone routers), four Catalyst switches, a PIX Firewall, two ASAs, VPN 3005 Concentrator, IPS Sensor, ACS Server and XP Workstation. Proctor Labs also guarantees that the IOS is the latest and greatest, that the hardware is the most up-to-date on the market (matching what is actually on the real lab) and that the interface will provide clients with a user-friendly experience.
Not only is the hardware and interface the best around, it is also supported 24x7 by an elite group of technical support representatives that are just a phone call or instant-message away.
Do not use older, outdated or slower racks. Use the best solution available today - the Proctor Labs vRack solution.
Remote Control Tools in the User Interface:
- All routers can be controlled via the web with our GUI remote control system.
- Clients will not waste time on the racks... when clients begin a session, all devices WILL BE set to the default (blank) setting.
- RDP access to both ACS/IEV/SCEP Server and the XP Workstation with SSL/IPSec clients.
- Web GUI access to VMWare virtual servers (ACS and WinXP) to Start / Stop / and Revert to clean configuration.
- Each device can be power cycled by our RPC (Remote Power Control) system with a click of a button.
- Single Page Login (no need to telnet to rack's terminal server). Login and begin using our online hardware instantly.
- Session Management (view scheduled time and reschedule without human intervention)
Hardware Details:
- Routers are 2800 and 3800 series ISR routers, and VERY fast!
- PIX Firewall, two ASAs, VPN 3005 and IDS access
- RDP Access to ACS Server with IEV and SCEP on Win2k3, and Windows XP Workstation with SSL and IPSec client along with Putty SSH Client to test all scenarios.
- Each POD is equipped with four Catalyst 3560 switches running 12.2(25)SEE2 IPServices or AdvIPServices code.
- Each POD has Frame Relay, Fast Ethernet, Serial, and Gig Ethernet technologies.
- Each POD has three Backbone routers used to interject routes or other technologies; these are reachable and can be accessed by our clients.
Standard CCIE Security Topology
Dynamips Support
The CCIE lab exam is a "hands on" certification exam. Therefore, it is a MUST to gain hands-on experience with Cisco devices at an extremely sophisticated level. Clients must be very intimate with the Cisco IOS, which takes the average CCIE candidate anywhere from 300 to 1000 hours of hands-on preparation to master.
If clients are without their own lab hardware, IPexpert has a very sophisticated online vRack offering (through our sister company, Proctor Labs) that is very affordable and convenient for all clients. However, if online vRack rental is not within the training budget, there is another solution that clients may consider, called "Dynamips".
Dynamips is a popular emulator for Cisco routers that can load and run IOS images on "virtual routers" running on a computer. Dynamips does have limitations, particularly with respect to switching support (it can only simulate switch modules within a virtual router) and the amount of memory and CPU resources that are available on a computer. Also, in order for Dynamips to work properly, clients will need a valid license to the correct Cisco IOS (which is something that IPexpert does not distribute or provide in any way, shape or form).
At IPexpert, we understand that there are many costs associated with studying for the CCIE Lab exam and, to assist clients with maximizing a budget, we provide Dynamips configuration files for each lab scenarios FREE OF CHARGE. These files are made available to clients automatically when they purchase our self-study materials. Some competitors charge for "different" (Dynamips) training materials, however we have decided to design IPexpert self-study products so Dynamips is an option without the increased cost of purchasing a second version of the book.
Our Recommendation
In addition to Dynamips, we strongly recommend and encourage that clients plan on dedicating at least half of their hands-on preparation time to the use of real equipment. Dynamips does have some limitations, (specifically pertaining to the 3560 switching elements) therefore, it is unrealistic to assume that Dynamips could be used for 100% of CCIE preparation.
About Our Preparation eBook for CCIE Security Core Knowledge / OEQ
IPexpert's industry-recognized collection of workbooks has now been enhanced. This workbook is part of the world's most up-to-date training solution available for Cisco's grueling CCIE Security 3.0 Lab exam.
Nearly a decade of leading the CCIE training industry, IPexpert has coined the term "Structured Learning Approach" to describe its methodology for maximizing student success. IPexpert has developed learning materials around proven techniques. Over one thousand successful students have enthusiastically recommend these study techniques to others. Some companies claim to be experts in this field, but the fact that IPexpert has amassed the world's largest list of successful CCIEs speaks for itself. Follow IPexpert's Structured Learning Approach and become the next member of this elite group.
Candidates taking the CCIE Security 3.0 Lab must master a "Core Knowledge" component of the practical exam. Candidates are given 4 questions at the beginning of the lab that prove to the Proctor that you understand the theory of the lab. This must be passed prior to moving on. Our Core Knowledge preparation workbook is the solution that allows students to master this theory.
Developed by IPexpert's highly-decorated team of instructors, be certain that this workbook combination is the most up-to-date and refined product on the market. It's FREE and will be delivered to your Member's Area.
Tyson Scott, a Triple CCIE, brings to IPexpert more than 14 years of experience in the IT industry, six of those years at a senior-engineer level. He spent five years at Hewlett Packard in its Managed Services division. Tyson also served two years with Advanced Services at Cisco. Over the years, he has gained valuable "real world" knowledge, having worked on global solutions on some the largest networks out there. At IPexpert, Tyson is responsible for automation programs used to simplify customer experiences and increase customer satisfaction. He is also instrumental in the delivery and development of IPexpert's CCIE R&S, CCIE Security and CCIE Service Provider classes and products and has been a key component in IPexpert's world-renowned success.
With nearly a decade of experience, and an emphasis on high-tech Cisco-focused networks, Brandon Carroll has proven that he has a diverse background that is proven and unmatched worldwide. After a short, but honorable career in the United States Air Force, he began focusing on Cisco Routing & Switching, Security, Voice and Wireless networking. He is a distinguished and published author, responsible for several Cisco Press books including "Cisco Access Control Security; AAA Administrative Services" (ISBN # 1-58705-124-9), "CCSP SNRS Quick Reference (Digital Short Cut)" (ISBN # 1-58705-512-00), "CCSP SND Quick Reference" (ISBN # 1-58705-503-1), "CCSP SNPA Quick Reference", (ISBN # 1-58705-542-2) and "CCNA Wireless Official Exam Certification Guide (CCNA IUWNE 640-721)" (ISBN-10: 1-58720-211-5). He has delivered quality and endorsed training and also provided consulting services for fortune 100 companies and organizations such as Boeing, Northrup-Grumman, Qwest, T-Mobile, AT&T, the US Army, US Navy and US Air Force. He currently possesses the Cisco CCNA, CCNP, CCSP and CCIE Security certifications (as well as a wealth of specializations and other vendor certifications) and is tasked with, and working on, his CCIE R&S and CCIE Voice certifications. Brandon joins IPexpert after a lengthy tenure teaching for a training organization on the West Coast and will be responsible for developing and teaching IPexpert's CCNA, CCSP and CCIE Security self-study products and courses.
Beta Testers & Developers
After spending 10+ years as an Electrical Engineer, Stuart redirected his career into IT, and has since accumulated over 7 years experience within various IT industries, including Financial, Solution Provider/Outsourcing, and Manufacturing to name a few. Although specializing in Network Security, Stuarts experience includes Enterprise & Data Center network design & implementation; LAN infrastructure, Voice, Wireless & management.
Piotr has been in the security space for the last three years working mostly with VPNs, PKI and firewall solutions. Currently he works as Systems Security Engineer at Acxiom supporting clients and internal networks. Piotr holds master's degree in computer science majoring in networking and network security.
IPexpert's Client Support Techniques
Although this product is specifically designed to be utilized as a self-study learning tool, IPexpert clients are never left on their own. IPexpert's commitment to top-notch customer support is a cornerstone of our mission statement.
Many CCIE training entities promise support on their forums or within their communities. IPexpert is different. We go above and beyond the competition by being available to serve you in many different ways.
- 24x7 peer group and Instructor support through an active email list community (www.OnlineStudyList.com)
- Tech support available directly through support@ipexpert.com
- Friendly and knowledgeable support via phone, live chat or email by CCIE-focused Training Advisors, Support Engineers and Instructors, available Monday through Friday from 8am to 6pm Eastern
- Hardware and delivery issues addressed by Support Engineers 24x7 via telephone, live chat or email.
- Our active blog provides insight, guidance and announcements pertaining to CCIE news, product updates and lab changes
- Dedicated Fulfillment Coordinators ensure that orders (whether hard copy or digital) are processed and delivered in a timely and accurate manner
- IPexpert also releases news and information to clients through its Facebook group and Twitter accounts, which can be subscribed to by clicking on those appropriate links
In summary, clients can be confident that IPexpert will stand by their side from the beginning of your CCIE preparation until they earn their numbers. The CCIE certification is a long journey. Having helped over one thousand CCIE hopefuls actually pass the CCIE Lab exam, IPexpert knows what it takes to get clients there and we are DEDICATED to clients success.
IPexpert is able back up the claim that other companies make as the "world's most recognized and elite CCIE training organization." Boasting the industry's most extensive portfolio of learning materials and courses, backed by the world's most knowledgeable team of CCIE-focused Training Advisors, Support Engineers and Instructors. IPexpert has been able to certify MORE CCIEs THAN ANY OTHER COMPANY IN THE WORLD. Many of these CCIE's have forged ahead, earning two, three and even four CCIE certifications with IPexpert's assistance and mentoring. IPexpert would be honored to add you to our growing list of successful and satisfied clients.
Below are some success stories from CCIE's — in their own words. — and MANY more are available HERE.
I want to thank you and your staff for providing me the necessary study tools to pass this lab. Also the efforts you made to me personally by answering my emails were outstanding. I would recommend your materials to anyone looking to take this test.
Again... many, many thanks and a lifetime of gratitude to the hard work and level of intelligence you folks put forth every day.
The IPexpert Security Workbook is the only lab book I purchased to prepare for the Security lab exam. The examples were detailed and thorough. It helped me tremendously and allowed me to think of different avenues of approach to the test.
I passed the Security lab on my first attempt in Brussels. Thanks!
Investment Assurance Program
IPexpert understands the importance of ensuring the value of clients investment. When clients embark on the certification path, rest assured that IPexpert will be their advocate along the way.
Valued IPexpert clients, are entitled to the following benefits related to this product:
As clients begin working through the IPexpert CCIE training materials, we are confident clients will be extremely pleased with the content. IPexpert's renowned team of CCIE Instructors have developed a methodology for teaching complex technologies in a structured manner that maximizes clients understanding in each study session.
The accuracy and thoroughness of the material flows from topic to topic, years of product refinement are evident throughout. IPexpert is constantly striving to improve, Instructors may revise the materials clients purchase. Whether the wording of single question is changed or an entire section is replaced, clients will receive online access to the revised material at no charge.
NOTICE: The above-stated details are governed by the following program policies:
- The lifetime of the Investment Assurance Program coverage correlates to the Cisco exam version in effect at the time of purchase. When a new version of the certification exam becomes effective and enforced by Cisco, clients will be offered a discounted upgrade path to purchase training solutions correlated to the new exam version.
- Coverage is valid for products and courses directly purchased from and delivered by IPexpert. Training products and courses purchased through or delivered by third parties and partners of IPexpert may be governed by separate policies set forth by the third party vendor.
- Coverage is valid for training purchased at full retail pricing. Coverage may not be applicable with sale prices, negotiated volume discounts, promotional giveaways, free samples or other non-standard pricing scenarios.
- Regarding errata and revisions provided for self-study products, online access may not be applicable to all products. In that case, clients will have the option to purchase new media for a nominal fee to cover production, shipping and handling.
- If clients purchase an IPexpert course, but do not pass the exam afterwards, they are eligible to retake the class once again before their next lab exam attempt - at NO CHARGE.
- Additional terms and conditions apply, please see our End User License Agreement and Guarantee for details.
The retake seats include full access to dedicated pod of equipment, just like the first time through the class.
Note: Students are required to complete the Cisco Course Evaluation for the first class to qualify for a retake. IPexpert courses are consistently in high-demand and fill up fast. Retake seats are limited, of course, so email a request to sales@ipexpert.com as soon as possible to have a better selection of dates and locations.
Be sure to contact a CCIE Training Advisor with any questions or concerns prior topurchase.
