We're Sorry, Full Content Access is for Members Only...

If you like to keep on reading, Become a Member Now! Here is Why:

  • Learn any CCNA, CCNP and CCIE R&S Topic. Explained As Simple As Possible.
  • Try for Just $1. The Best Dollar You've Ever Spent on Your Cisco Career!
  • Full Access to our 568 Lessons. More Lessons Added Every Week!
  • Content created by Rene Molenaar (CCIE #41726)


323 New Members signed up the last 30 days!


100% Satisfaction Guaranteed!
You may cancel your monthly membership at any time.
No Questions Asked!


Forum Replies

  1. tkalis says:

    Hi. Although not directly related to this wondering if you could help me out as it relates to NTP and the ASA. Does the ASA only support NTP using authentication?

    Many thanks,

  2. hi rene I've almost completed my ccnp route and switch and I hope to be starting the ccnp security track sometime this year but i'd like to build my own home lab but i'm not sure what i'd need to cover all the stuff on the new exam as I've heard a lot of people saying that cisco have not even released the training books for the exam yet could you help me with what I would need for a home lab thanks

  3. Hi Shaun. I have a Cisco PIX515E and a 2851. Most of the commands that Rene uses are able to be used on the PIX. These are available on eBay for a fraction of the cost of an ASA. Get one with an unlimited licence and IOS version 8. This allows for a RAM upgrade to 256MB+ and failover if you get adventurous. The RAM & CPU are also easily upgradeable. Cheers, Matt.

  4. Hi Shaun & Matt,

    If your goal is to study for the exams then it's best to start with the blueprints that have the exam topics. I've added them in the attachment.

    Here's a general overview:

    The SIMOS exam has topics like DMVPN, FlexVPN, IPsec, GETVPN, etc. You can test any of these topics on IOS routers and the ASA. I would make sure that you use IOS 15 and the latest ASA images otherwise you might run into issues with commands that are not supported.

    SENSS is all about security on switches, routers and the ASA.

    In the SITCS exam you have some different topics...there's WSA (Web Security Appliance) and ESA (Email Security Appliance). These products are available as hardware boxes but also as VMWare images.

    SISAS is about 802.1X and using ISE (Cisco Identity Services Engine)

    Basically, you need this:

    • IOS routers

    • IOS switches

    • ASA Firewalls

    • VMWare workstation or ESXi for the virtual appliances

    If you want real hardware then you could look at some 3560/3750 switches, the 1841 or 28xx series routers, the ASA 5510s and/or the 5506-X (because of the new features).

    Personally, I would build an ESXi server that runs Cisco VIRL. This allows you to run all routers, switches and ASA firewalls that are required. You can use your ESXi server to run all the other requires virtual appliances as well. You'll be able to practice 99% of all the topics in the CCNP Security exams with a single server.

    Hope this helps :slight_smile:


    300-206_senss.pdf (112.2 KB)

    300-207_sitcs.pdf (116.1 KB)

    300-208_sisas.pdf (120.2 KB)

    300-209_simos.pdf (100.7 KB)

  5. Hi Rene:

    I've been looking round for a good reading list regarding firewalls and VPN's as i already have passed my ccna security exam. The INE website gives you a list but alot of these book came out in 2005 thats a long time ago, and the tech world moves fast. Can you please tell me what books would be a good read i don't mind if they are CCIE level because i can just take my time understanding them. This is the list i'm thinking of buying

    Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance / I've now got this book really good and upto date.

    Cisco Router Firewall Security / I want to buy this book but came out in 2005 can't seem to find anything newer does this mean that firewalls have not changed since then.

    The Complete Cisco VPN Configuration Guide / Again i want to buy this but no IKEv2 or vti configuration

    If you can tell me any better books to read please help as i love learning about firewall and vpn's, and want to have my next reading list in place after i finish the last part of my CCNP route switch. Only the Tshoot to go.

4 more replies! Ask a question or join the discussion by visiting our Community Forum