CCIE - security

[spidey07]

So I failed the CCIE routing and switching practical lab. Seems like security is a hot topic nowadays so does anyone have an opinion on RS vs. Security CCIE? Seems like the CSSIP cert is WAY too easy, so could the CCIE security track be much harder? How does the Routig/Swithing practical compare to the security?

thanks in advanced.

 

[Garion]

If you really want to do security, get your CISSP first. Then, go for your CCIE - Security. You're so close to the RS that you might as well go for it and not waste what you've leared and all the practice you put in.

If you want a real hardcore security job, a CISSP will likely be equally useful - It's a more industry-accepted security certification beyond just Cisco.

- G

 

[spidey07]

Yeah, but the guy I know who just passed the CSSIP is a complete moron. Is it really that easy?

I mean he doesn't know what an IP address is moron.

<---me not kidding.

 

[ScottMac]

HEY!! Be nice to that moron, he could be your boss someday.....

You know how THAT goes sometimes.....

FWIW

Scott

 

[spidey07]

he works for me.

don't insult me again scott.

 

[Mucman]

LOL, at least he doesn't fiddle with switches and change the management VLAN on you

 

[FFC]

I haven't taken the security lab so I'm not in a position to compare. Why don't you do both. All of the work you put into R&S can be carried over into security if you don't interrupt your studies for too long. As for the moron, the networking business is full of charlatans and morons you just have to try and weed them out at interviews.

 

[THELAIR]

a CISSP is in no way meant to be able to have the same grasp as a CCIE... NONE WHATSOEVER

a CCIE is hte top/hardest TECHNICAL exam in the entire computer industry.

CISSP is a high level overview MANAGERIAL in nature certification, that only not touches on some technical aspects, like IP#'s, subnets, OSI layer etc, but the other 9 domains, including cryptography, federal laws and acts, physical security, etc...


As a CISSP though, I feel that ISC2 is really letting WAY to many people into the arena and making a fast buck. No way should those exam cram books be allowed for somthing like this. The CISSP is not somthing you can cram for. Just like how you can not cram for a 2 day physical hands on lab for the CCIE. In the last 8 months that I have had my cert, the number of people that have SINCE obtained the CISSP is somthing like 25%!!!!!!!!!!!

Yes we need more certified security folks, that is for sure, but not at the risk of integrity of the exam and the people who hold the CISSP.

I keep thinking that hte CISSP is where the MCSE cert was back in 96/97 where you could name your own price if you had it. Now it seems to be ranked up there with an A+

Ahh well...


hope that helps

PS Im thinking of going the cisco specialist trakc, getting my CSS, Cisco Security Specialists. You have to take hte MCNS and Pix and 2 other certs i think? to get it. Managing Cisco Network Security and PIx is their firewall.

 

[Phil21]

THELAIR - What you say is true, for the most part.

But the CCIE tests have been getting easier, and more morons have been being passed. There was discussion about that fact on NANOG even, so it's not just myself and my small group that have noticed this.

Not to the level a MCSE is yet, but on the way towards getting there.

-Phil

 

[Nutz]

Interesting thread. Definitely gave me a few things to think about.

Any suggestions for a guy working his way up? I love routers and such, but I fear that by the time I get out of the Air Force (2007) there will be so many paper certs running around that I'll be screwed. I would have thought 10 years experience, a BS, and holding mid-upper level certifications would be enough, but the way things are going these days I just don't know anymore. What can I do now to secure my future in the IT game?

 

[spidey07]

My questions stem from increasing marketability. I'm more of a network architect/project manager. I'm looking to broaden my skillset beyond just "designing networks and running the projects/resources to make it happen". Tough call really, do you want to be a technical expert in one arena or really good at a bunch of different ones. I'm striving for communications expert with a good degree of expertise in enterprise computing and at the same time hold strong manager/director experience. I see that niche as being woefully under staffed in IT today.

So, Nutz. What is it that you want to do? Chasing a market trend is fine in the beginning but life long career advancement/joy at your job is something totally different.

<edit> What can you do now? As always learn and play with everything you can get your hands on. Certifications are just that - feathers in da cap. Experience/competance/professionalism will show on interview and technical interview. OH - best piece of advice on what you can do now - network and make friends in the industry.

 

[Nutz]

<< So, Nutz. What is it that you want to do? Chasing a market trend is fine in the beginning but life long career advancement/joy at your job is something totally different.

<edit> What can you do now? As always learn and play with everything you can get your hands on. Certifications are just that - feathers in da cap. Experience/competance/professionalism will show on interview and technical interview. OH - best piece of advice on what you can do now - network and make friends in the industry. >>



For the time being I need to be the Jack of all trades because of my job. Thats why, for the time being, I'm persuing the CCDP and CCNP tracks.

When I separate I'd like to focus on design and implementation. Perhaps CCIE-R/S or WAN? The security side is okay, but its not something that rings my bell.

Something that I'm also trying to get caught up on is the TelCo side of things. The PBX, circuits, etc. Those are things that I've never been trained on, but go hand-in-hand with what I do.

And then there is signaling, pin-outs & signal flow, etc. It wasn't until a few weeks ago that I understood what Manchester and B8ZS were, let alone how they came into play. All the stuff that EE's take for granted is what I still need to learn...

 

[FFC]

Nutz the CCIE-WAN has died along with cisco's interest in ATM. Now you get a choise of R&S, Security and Communications and Services the latter being a service provider focussed thing. Thus the WAN, Dial and design CCIE exams have gone.

Phil21, the NANOG discussion was more about the pertinence of CCIE to service provider environments, most ISP's pay not attaention to certs because they have no relevence. The CCIE lab will n ever reach the level of MCSE simply because it requires some hands on work. The idea that it is getting easier is something I would argue with as well. There is now more information available for people to use to study and people are studying smarter, thus the numbers increase. I don't think it's any easier now though.