Somnipotent wrote: » I'd start with an ASA 5505, at least theoretically that would be the first appliance you'll be working with for CCNP Security. The IPS modules can be had and installed on any 800 series ISR however those can be quite pricey.