Technology-Focused CCIE Security (3.0) Lab Preparation Workbook (Volume 1) with Detailed Solution Guide

$399.00
 
$449.00
 
 

NoticeThe Volume 1 Workbook and accompanying Detailed Solution Guide are also part of our CCIE Security 3.0 Blended Learning Self-Study Bundle. Be sure to check out how much more content you can get for a little more money with the Blended Learning Solution

 
 

About Our Volume 1 CCIE Security 3.0 Lab Preparation Workbook

IPexpert's industry-recognized Technology-Focused CCIE Security (3.0) Lab Preparation Workbook (Volume 1) with Detailed Solution Guide is a proven set of workbooks (lab preparation scenarios and detailed solutions) that have been tested, enhanced and is part of the world's most up-to-date training solution available for Cisco's grueling CCIE Security 3.0 Lab exam.

Throughout nearly a decade of leading the CCIE Security training industry, IPexpert has coined the term "Structured Learning Approach" to describe its methodology for maximizing student success. We have developed our learning materials around our proven techniques and over a thousand successful students who have enthusiastically recommended these study techniques to others. Some companies may claim to be experts in this space, but the fact that IPexpert has amassed the world's largest list of successful CCIEs speaks clearly for our record. Let us help you to join this elite group!

Candidates entering the early round of their CCIE Security Lab preparation must master various technologies and protocols before they can begin working on full-scale mock CCIE labs. Therefore, throughout the first phase of your  lab preparation, protocol-focused and technology-focused lab scenarios must be mastered to ensure that you gain the complete understanding of both the fundamentals and complex implementations of that challenging protocol or technology.  This workbook is the solution that will allow you to master these technologies and protocols. This workbook combination contains 16 complex lab scenarios and extremely detailed solutions on all of the latest topics seen on the 3.0 Security Lab blueprint.  

Developed by our highly-decorated team of CCIE Instructors, you can be certain that this workbook combination is the most up-to-date and refined product on the market. The experience you will gain through these hands-on scenarios will serve as an invaluable step toward your CCIE Security success.

Why Choose IPexpert

Enjoying nearly a decade of success and boasting the world's largest list of successful candidates, IPexpert is pleased to offer you the world's most proven, content-rich technology-focused CCIE Security 3.0 Lab preparation workbook. The industry's most recognized workbook and the accompanying solution guide are explained as follows:

  • Hundreds of pages full of extremely useful, complex and challenging lab scenarios (some say more challenging than the real lab!)
  • A collection of 8 sections (16 labs) that are protocol-focused, current and up-to-date and guaranteed to cover the current lab exam blueprint topics and the troubleshooting that's now seen on the new 3.0 CCIE Security Lab blueprint.
  • A training solution with extremely detailed diagrams that are thorough are easy to comprehend
  • Designed around a standard topology large enough to change the logical topology without recabling or moving any devices (if home hardware is utilized)
  • A phenominal training solution supported by the world's most sophisticated online CCIE Security vRack solution, boasting amazing graphical remote controls to ensure a user-friendly experience
  • The most complete training solution in terms of configurations and solutions. You receive the initial (start-up) configurations, making it easy for you to get started on the actual lab exam as well as final configurations, allowing you to check your work against that of the lab Authors
  • Thousands of pages (breaking down the task, step-by-step) representing extremely detailed solution walk-throughs consisting of extensive explanation by the industry's most recognized and accredited Instructors and Developers
  • Hints, tips and tricks outline what to watch for are explained in detail by the Authors and Instructors that have trained thousands of CCIEs to pass the CCIE Security Lab exam
  • An amazing training solution that is kept current by the world's most elite team of technical Instructors, all of which hold multiple certifications, degrees and multiple CCIE certifications
  • A comprehensive workbook supported online by the Authors and Developers that thousands of your peers have trusted
  • The world's most proven product, boasting more CCIE success stories and testimonials than any other company
  • A "must have" training product backed by IPexpert's Investment Assurance program that has raised the bar and set the precidence for training guarantees!

Closing Statements on Why You Should Use IPexpert's Training Solutions

This industry-recognized workbook has been used by over a thousand of your peers as their primary resources used to prepare for the grueling CCIE Security Lab exam. We would like to highlight a few key points you should consider when selecting a CCIE training vendor:

  • Which vendor's workbook has been (and is currently) used by more candidates to pass the CCIE Lab exam for each particular track?
  • Which vendor includes their full printed solutions (solutions guide, tips, hints, FAQs, verifications, etc) free of charge with the workbook?
  • Which vendor's workbooks and overall Structured Learning Approach has been proven, tested and successful for nearly a decade?
  • Can you find another vendor that offers the level of support, guidance and authenticity that comes close to IPexpert?
  • Which vendor's products have scaled the world and have been delivered to every developed country in the world?
  • What vendor can match the level of competency as it relates to our dedicated, full time team of industry-recognized and accredited Authors and Instructors?

IPexpert understands that the CCIE journey is a long process. Our Training Advisors, Support Engineers, Instructors and Developers will stand with you, by your side, during the entire process of your CCIE journey, regardless of how long it takes you!

Table of Contents

At IPexpert, we take great pride in being known as the industry's most up-to-date and thorough Cisco training provider. We guarantee that all training materials we ship to our clients are current and up-to-date, reflecting all of the topics that are outlined on the most recent CCIE Security 3.0 Lab blueprint. If, at any time, you have questions pertaining to our content, we invite you to contact one of our CCIE-focused Training Advisors who will be happy to assist you in creating a customized study plan that fits your learning preferences and your training budget.

Below, you will find the topics, technologies and protocols that are currently included in IPexpert's Technology-Focused CCIE Security 3.0 Lab Preparation Workbook.

  • Lab 1A: Configuring secure networks using Cisco ASA Firewalls. 11
  • Lab 1B: Troubleshooting secure networks using Cisco ASA Firewalls. 24
  • Lab 2A: Implementing secure networks using Cisco IOS Firewalls. 27
  • Lab 2B: Troubleshooting secure networks using Cisco IOS Firewalls. 35
  • Lab 3A: Implementing secure networks using Cisco VPN solutions
  • Lab 3B: Troubleshooting secure networks using Cisco VPN solutions 
  • Lab 4A: Configuring Cisco IPS to mitigate network threats
  • Lab 4A: Troubleshooting Cisco IPS to mitigate network threats  
  • Lab 5A: Implementing Identity Management. 39
  • Lab 5B: Troubleshooting Identity Management. 50
  • Lab 6A: Configuring Control Plane and Management Plane Security. 53
  • Lab 6B: Troubleshooting Control Plane and Management Plane Security. 59
  • Lab 7A: Configuring Advanced Security. 67
  • Lab 7B: Troubleshooting Advanced Security. 77
  • Lab 8A: Identifying and Mitigate Network Attacks. 88
  • Lab 8B: Troubleshooting Misconfigured Network Attack Mitigation. 96

Topology / Hardware

About Our Online Hardware / vRacks

Proctor Labs provides 24 CCIE Security vRacks that are second-to-none. Our Cisco equipment is the latest and greatest available and we provide an online experience like no other provider can. All Proctor Labs Security racks are structured around the IPexpert CCIE Security product topology consisting of 13 routers (including Frame Relay switch, Terminal Server and three Backbone routers) and four Catalyst switches. 

Maximize your study time by renting Proctor Labs' online hardware. You will be impressed by the customized graphical user interface that allows you full access and control of the devices in your rack!  

Remote Control Tools in the User Interface

  • All routers can be controlled via the web with our GUI remote control system.
  • You will not waste time on our racks... when you begin your session, your routers WILL BE set to the default (blank) setting.
  • Each device can be power cycled by our RPC (Remote Power Control) system with a click of a button.
  • Single Page Login (no need to telnet to rack's terminal server). Login and begin using our online hardware instantly.
  • Session Management (view scheduled time and reschedule without human intervention).
  • All routers can be controlled via the web with our GUI remote control system.
  • RDP access to both ACS Server and the XP Workstation with SSL/IPSec clients.
  • Web GUI access to VMWare virtual servers (ACS and WinXP) to Start / Stop / and Revert to clean configuration.

Hardware Details

  • Routers are 2800 and 3800 series ISR routers, and VERY fast!
  • Two ASA's and IPS 4240 access
  • RDP Access to ACS 4.1 Server on Win2K3, and Windows XP Workstation with SSL and IPSec client along with Putty SSH Client to test all scenarios.
  • All routers run 12.4(15)T or greater IOS.
  • Each rack is equipped with four Catalyst 3560 switches running 12.2(46)SE or greater IP Services code.
  • Each rack has Frame Relay, Fast Ethernet, Serial, and Gig Ethernet technologies.
  • Each rack has three Backbone routers used to inject routes or other technologies; these are reachable and can be accessed by our clients.

Standard CCIE Security Topology


Dynamips Support

Dynamips is a popular emulator for Cisco routers, that can load and run IOS images on virtual routers on your PC. Dynamips does have limitations, particularly with respect to switching support (it can only simulate switch modules within a virtual router) and the amount of memory and CPU resources that are available on your PC. At IPexpert we understand that there are a lot of costs associated with studying for your CCIE lab exam and to that end we provide Dynamips configuration files for each of our labs that are downloadable when you purchase our products. In addition to Dynamips, we strongly recommend that you do at some practice labs using real equipment prior to your lab exam so that you are comfortable with the 3550, 3560 and 3750 switching elements of your study. Through our partner, Proctorlabs.com, we are also able to provide you with real equipment on which to implement each of our labs, when you need it.

 

 
Tyson Scott
Senior Technical Instructor
Cisco CCIE Routing & SwitchingCisco CCIE SecurityCisco CCIE Service Provider
CCIE #13513 (R&S Sec SP), CCNP, CCDP, CCNA, CCDA, MCP, Linux Administrator, ITIL foundations

Tyson Scott, a Triple CCIE, brings to IPexpert more than 14 years of experience in the IT industry, six of those years at a senior-engineer level. He spent five years at Hewlett Packard in its Managed Services division. Tyson also served two years with Advanced Services at Cisco. Over the years, he has gained valuable "real world" knowledge, having worked on global solutions on some the largest networks out there. At IPexpert, Tyson is responsible for automation programs used to simplify customer experiences and increase customer satisfaction. He is also instrumental in the delivery and development of IPexpert's CCIE R&S, CCIE Security and CCIE Service Provider classes and products and has been a key component in IPexpert's world-renowned success.


Brandon Carroll
Technical Developer
Cisco CCIE Security
CCIE #23837 (Sec), CCNA, CCNP, CCSP

With nearly a decade of experience, and an emphasis on high-tech Cisco-focused networks, Brandon Carroll has proven that he has a diverse background that is proven and unmatched worldwide. After a short, but honorable career in the United States Air Force, he began focusing on Cisco Routing & Switching, Security, Voice and Wireless networking. He is a distinguished and published author, responsible for several Cisco Press books including "Cisco Access Control Security; AAA Administrative Services" (ISBN # 1-58705-124-9), "CCSP SNRS Quick Reference (Digital Short Cut)" (ISBN # 1-58705-512-00), "CCSP SND Quick Reference" (ISBN # 1-58705-503-1), "CCSP SNPA Quick Reference", (ISBN # 1-58705-542-2) and "CCNA Wireless Official Exam Certification Guide (CCNA IUWNE 640-721)" (ISBN-10: 1-58720-211-5). He has delivered quality and endorsed training and also provided consulting services for fortune 100 companies and organizations such as Boeing, Northrup-Grumman, Qwest, T-Mobile, AT&T, the US Army, US Navy and US Air Force. He currently possesses the Cisco CCNA, CCNP, CCSP and CCIE Security certifications (as well as a wealth of specializations and other vendor certifications) and is tasked with, and working on, his CCIE R&S and CCIE Voice certifications. Brandon joins IPexpert after a lengthy tenure teaching for a training organization on the West Coast and will be responsible for developing and teaching IPexpert's CCNA, CCSP and CCIE Security self-study products and courses.


Beta Testers & Developers

 

Iwan Hoogendoorn
Support Engineer
Cisco CCIE Routing & SwitchingCisco CCIE VoiceCisco CCIE SecurityCisco CCIE Service Provider
CCIE #13084 (R&S Voice Sec SP), CCNA, Cisco Advanced Wireless LAN Field Specialist , Cisco Unity Support Specialist , Microsoft MCSE, MCSA, MCDBA, ITIL Foundation
Iwan's career consists of over 10 years of experience designing, supporting and troubleshooting Cisco infrastructures. Iwan achieved his first CCIE (R&S) 5 years ago when he was only 22 years old. Shortly after, he also added the CCIE Service Provider and CCIE Security to his portfolio of certifications which also contains the CCNA, MCSE, MCSA, MCDBA, ITIL Foundation, Cisco Advanced Wireless LAN Field Specialist & Cisco Unity Support Specialist certifications. In 2010 Iwan passed his CCIE Voice lab, giving him 4 CCIEs. Iwan in involved in IPexpert's CCIE R&S 4.0 and CCIE SP Development and Support and will is extremely active on our email list and blog!

Stuart Hare
Support Engineer
Cisco CCIE Security
CCIE #25616 (Sec), CCSP, Microsoft MCP

After spending 10+ years as an Electrical Engineer, Stuart redirected his career into IT, and has since accumulated over 7 years experience within various IT industries, including Financial, Solution Provider/Outsourcing, and Manufacturing to name a few. Although specializing in Network Security, Stuarts experience includes Enterprise & Data Center network design & implementation; LAN infrastructure, Voice, Wireless & management.


Piotr Kaluzny
Support Engineer
Cisco CCIE Security
CCIE #25665 (Sec), CCSP

Piotr has been in the security space for the last three years working mostly with VPNs, PKI and firewall solutions. Currently he works as Systems Security Engineer at Acxiom supporting clients and internal networks. Piotr holds master's degree in computer science majoring in networking and network security.  Piotr has also just finished developing our new CCIE R&S Written Video on Demand product.



IPexpert's Client Support Techniques

Although this product is specifically designed to be utilized as a self-study learning tool, IPexpert clients are never left on their own. In fact, IPexpert's commitment to top-notch customer support is a cornerstone of our mission statement

Many CCIE training entities promise support on their forums or within their communities. IPexpert is different.  We go above and beyond our competition by being available to serve you in many different ways.

  • 24x7 peer group and Instructor support through our active email list community (www.OnlineStudyList.com)
  • Tech support available directly through support@ipexpert.com
  • Friendly and knowledgeable support via phone, live chat or email by CCIE-focused Training Advisors, Support Engineers or Instructors, available Monday through Friday from 8am to 6pm Eastern.
  • Hardware and delivery issues addressed by Support Engineers 24x7 via telephone, live chat or email.
  • Our active blog provides insight, guidance and announcements pertaining to CCIE news, product updates or lab changes.
  • Dedicated Fulfillment Coordinators ensure that your order (whether hard copy or digital) is processed and delivered in a timely and accurate manner.
  • IPexpert also releases news and information to clients through its Facebook group and Twitter accounts, which can be subscribed to by clicking on those appropriate links.

In summary, you can be confident that IPexpert will stand by your side from the beginning of your CCIE preparation until you earn your numbers! The CCIE certification is a long journey. Having helped over a thousand CCIE hopefuls actually pass the real CCIE Lab exam, IPexpert knows what it takes to get you there and we are DEDICATED to your success!

IPexpert is proud to boast the industry's most extensive portfolios of learning materials and courses, backed by the world's most knowledgeable team of Cisco-focused Training Advisors, Support Engineers and Instructors, IPexpert has been able to certify MORE CCIEs THAN ANY OTHER COMPANY IN THE WORLD. Many have forged ahead, earning two, three and even four CCIE certifications with our assistance and mentoring. We would honor the opportunity to add you to our growing list of successful and satisfied clients!

“"I would recommend your materials to anyone looking to take this test."”
By: Justin Serevitch, CCIE #18772 (Security)

I want to thank you and your staff for providing me the necessary study tools to pass this lab. Also the efforts you made to me personally by answering my emails were outstanding. I would recommend your materials to anyone looking to take this test.

Again... many, many thanks and a lifetime of gratitude to the hard work and level of intelligence you folks put forth every day.

 
 
“"The IPexpert Security Workbook is the only lab book I purchased to prepare for the Security lab exam."”
By: Will Brown, CCIE #18542 (Security)

The IPexpert Security Workbook is the only lab book I purchased to prepare for the Security lab exam. The examples were detailed and thorough. It helped me tremendously and allowed me to think of different avenues of approach to the test.

I passed the Security lab on my first attempt in Brussels. Thanks!

 
 

Investment Assurance Program    

At IPexpert, we understand the importance of ensuring the value of your investment. When you embark on your certification path, you can rest assured that IPexpert will be your advocate along the way!  

As a valued IPexpert client, you are entitled to the following benefits related to this product:

As you begin working through your IPexpert materials, we are confident you will be extremely pleased with the content. Our renowned team of instructors developed a methodology for teaching engineers complex technologies in a structured manner that maximizes understanding during each study session.

From the accuracy and thoroughness of the material to the flow from topic to topic, our years of product refinement are evident throughout. That said, because we are constantly striving to improve, our Instructors may revise the materials you purchase. Whether the wording of single question is changed or an entire section is replaced, you will receive online access to the revised material at no charge.

NOTICE: The above-stated details are governed by the following program policies:

  • The lifetime of your Investment Assurance Program coverage correlates to the Cisco exam version in effect at the time of your purchase. When a new version of the certification exam you are pursuing becomes effective and enforced by Cisco, you will be offered a discounted upgrade path to purchase training solutions correlated to the new exam version.
  • Coverage is valid for products and courses directly purchased from and delivered by IPexpert. Training products and courses purchased through or delivered by third parties and partners of IPexpert may be governed by separate policies set forth by the third party vendor.
  • Coverage is valid for training purchased at full retail pricing. Coverage may not be applicable with sale prices, negotiated volume discounts, promotional giveaways, free samples or other non-standard pricing scenarios.
  • Regarding errata and revisions provided for self-study products, online access may not be applicable to all products. In that case, you will have the option to purchase new media for a nominal fee to cover production, shipping and handling.
  • If you purchase an IPexpert instructor-led course, but do not pass the exam afterwards, you are eligible to retake the class once again before your next lab exam attempt - at NO CHARGE. 

Our retake seats include full access to your own dedicated pod of equipment, just like your first time through the class!

To Be Determined Policy    

  • To be determined (TBD) registrations are often requested when there is a promotion or special pricing available. These TBD registrations must be paid in full within 30 days of purchase. Payment plans are not accepted for TBD students. If purchase is initiated by purchase order, countdown begins at the date full payment is received.
  • Classes must be scheduled and taken within twelve (12) months from purchase date. If the class has not been scheduled or taken by the beginning of the thirteenth (13) month, the registration will be forfeit.
  • Rescheduling will be limited to two (2) additional times during that twelve (12) month period with the class date no more than three (3) months from the current date.
  • TBD registrations are non-refundable. In-store credit for the course fee (the amount paid less full-retail Self-Study/vRack price) will be issued if the TBD course is cancelled within the 12 month window.
  • Students are subject to rescheduling fees and course policies as outlined on the Course Registration Form.
  • If student registers and confirms a class date, registration cannot be converted to a TBD registration again at any time, the rescheduling policy must be followed.


    Note:
     Students are required to complete the Cisco Course Evaluation for the first class to qualify for a retake. Our courses are consistently in high-demand and fill up fast. Retake seats are limited, of course, so email your request to sales@ipexpert.com as soon as possible to have a better selection of dates and locations.

  •