成為CCIE除了整個產(chǎn)業(yè)的認同之外,，Security CCIE也是你不斷持有最新網(wǎng)絡(luò)知識的指標,；你將會在你的專業(yè)領(lǐng)域中成為一位最具競爭力的人,。

如何成為Security CCIE專家,？

要取得Security CCIE認證,，必須通過以下課程考試：
Security CCIE理論考試（Security CCIE考試號 350-018,、考試時間兩個半小時）
Security CCIE實驗考試（一天8小時）

入學(xué)條件

已經(jīng)通過CCSP或者具備相應(yīng)水平者

Security CCIE認證培訓(xùn)薪資水平

取得CCIE認證如無工作經(jīng)驗薪資水平為8000-12000元/月,，有工作經(jīng)驗18-20萬/年 

Security CCIE認證培訓(xùn)目標

現(xiàn)在市場上主流的3大防火墻產(chǎn)品，checkpoint公司的checkpoint全套產(chǎn)品.juniper公司的
netscreen,cisco 公司的ASA .作為三家業(yè)界龍頭的防火墻產(chǎn)品,，在市場上具有很高的市場占有率,。
讓學(xué)員真正學(xué)會使用所有的防火墻產(chǎn)品，成為名副其實網(wǎng)絡(luò)安全專家。 

Security CCIE課程介紹

Firewall

PIX and ASA Firewall 
Basic Initialization 
Access Management 
Address Translation 
ACLs 
IP Routing
Object Groups
VLANs 
AAA 
VPNs 
Filtering 
Failover 
Layer 2 Transparent Firewall 
Security Contexts (Virtual Firewall) 
Modular Policy Framework 
Application-Aware Inspection 
High Availability Scenarios 
QoS Policies 
Other Advanced Features 

IOS Firewall

CBAC 
Audit 
Auth Proxy 
PAM 
Access Control 
Performance Tuning 
Advanced Features

VPN

IPSec LAN-to-LAN 
SSL VPN 
DMVPN 
CA (PKI) 
Remote Access VPN 
VPN3000 Concentrator 
VPN3000 IP Routing 
Unity Client 
WebVPN 
EzVPN Hardware Client 
XAuth, Split-tunnel, RRI, NAT-T 
High Availability 
QoS for VPN 
GRE, mGRE 
L2TP 
PPTP 
Advanced VPN Features

Intrusion Prevention System (IPS)

IPS 4200 Series Sensor Appliance 
Basic Initialization 
Sensor Configuration 
Sensor Management 
Promiscuous and Inline Monitoring 
Signature Tuning 
Custom Signatures 
Blocking 
TCP Resets 
Rate Limiting 
Signature Engines 
IDM 
Event Action 
Event Monitoring 
IOS IPS 
PIX IDS 
SPAN, RSPAN 
Advanced Features 
Identity Management 
Security Protocols (RADIUS and TACACS+) 
Cisco Secure ACS Configuration 
Access Management (Telnet, SSH, Pwds, Priv Levels)
Proxy Authentication 
Service Authentication (FTP, Telnet, HTTP, other) 
Network Admission Control (NAC Framework solution)
802.1x 
Advanced Features

Advanced Security

Mitigation Techniques 
Packet Marking Techniques 
Security RFCs (RFC1918, RFC2827, RFC2401) 
Service Provider Security 
Black Holes, Sink Holes 
RTBH Filtering (Remote Triggered Black Hole) 
Traffic Filtering using Access-lists 
NAT 
TCP Intercept 
uRPF 
CAR 
NBAR 
NetFlow 
Flooding 
Spoofing 
Policing 
Fragmentation 
Sniffer Traces 
Catalyst Management and Security 
Traffic Control and Congestion Management 
Catalyst Features and Advanced Configuration

Network Attacks

Network Reconnaissance 
IP Spoofing Attacks 
MAC Spoofing Attacks 
ARP Spoofing Attacks 
Denial of Service (DoS) 
Distributed Denial of Service (DDoS) 
Man-in-the-Middle (MiM) Attacks 
Port Redirection Attacks 
DHCP Attacks 
DNS Attacks 
Fragment Attacks 
Smurf Attacks 
SYN Attacks 
MAC Attacks 
VLAN Hopping Attacks 
Other Layer2 and Layer3 Attacks