The Real Life of an Expert: Introducing the New CCIE Security 4.0

SubnetZero

Not sure if anyone has seen this or not but it looks like CCIE Security 4.0 is right around the corner. It also looks like they are REALLY changing it as you can see below. So, if you're working on your CCIE Security 3.0 you may want to kick it up a notch

Note: This is the "unofficial" announcement so you have longer than 6 months at least

Source: Take Control of Your Career: How to Become an IT Security Expert in 2012 - Cisco Systems

CCIE Security 4.0 is unusual among security certificates for its up-to-date, real-world content. It emphasizes security competency and efficient problem solving in networks that use cloud services, carry voice and multimedia traffic, and are accessed by a variety of wireless devices.The content, currently in development, may include real-world applications that involve:

• Securing both wireless and wired networks, including managing security policy by device and service
• Extending application awareness to security devices, moving security up to Layer 7 from the stateless packets of Layers 3 and 4, and applying policy on a per-identity basis
• Applying security policy in a network that has voice and video traffic
• Securing networks that use managed services, dual ISPs, IPv6, or IP multicast

Cisco will soon announce the blueprints for the CCIE Security 4.0 written and lab exams; the first exam will take place approximately six months later.Although there are no prerequisites for registration,

Cisco offers a preparation path through its CCNA and/or CCNP Security levels, and recommends that candidates have at least three years of hands-on network security experience.

nicklauscombs

This sounds like a much needed upgrade to the blueprint. Though from the upgrades there seems to be a even larger gap of knowledge between what they currently teach in CCNA/CCNP: Sec and what might be on the CCIE lab. Maybe those exams will get updated as well?

SubnetZero

It would make sense for Cisco to update the NA/NP Security exams as well, but who knows. As it currently stands there are already big enough gaps between the NP and IE tracks so I really hope they do.

Turgon

Looks like a big upheaval and perhaps overdue. I recall the CCIE in SP being a long way behind where it needed to be before it was changed. It may take time for the CCIE workbook vendors to adjust to this version. Historically the CCIE tracks were rather blended, with some differences in devices thrown in..I recall on the old CCIE in R&S we had IPSec, even some simple Voice peers thrown in. Then the separation came along, but for a few years the overlap was there, so if you had the gas..moving from R&S to SP or Security wasn't so hard and lots of CCIE's became dualed or tripled inside 12 months or so without killing themselves. With the development of the Voice track, the improvement in SP and the impending same in Security, that is not the case today. It's good that cisco are looking beyond layer 2/3/4 for security, in fact it's essential.

nicklauscombs

got an email from my contact over at ipexpert today regarding the changes. looks like they already have the wheels in motion in preparation for the exam upgrade. hopefully they won't be terribly long in pushing out the new material.