Just got back from VPN

Vask3nVask3n Posts: 517Member
Hey friends, just came back from VPN and passed it with 864. I'm still a little braindead and might have more info in the replies here later, but I have to be honest and say that for the first 25% of the test I was questioning whether or not I would pass. I was expecting it to be much easier than FIREWALL but interestingly enough I think it was at the same difficulty which I guess makes sense since they are both professional-level. It was a little hard to decipher a few of the questions and there was a ton of real-world type questions, let's just put it that way. It's a very practical test with lots of scenarios. There were definitely some questions where I was in/out in less than 10 seconds, while others were head-scratchers until you read it twice and notice the nuances in the available answers. Not too many sims, just enough to be able to get through the test with a little time left over.

I used the OCG which I recommend, CBT Nuggets, some Cisco videos on Cisco 365, and real-world experience with AnyConnect, IPsec, and Site-to-Site tunnels (actually this morning I was working on a S2S tunnel).

Special thank you to MasterOfPuppets, Heracles, RouteMyPacket, and everyone else on here for being a great support group.
Working on MS-ISA at Western Governor's University

Comments

  • dpsmooth15dpsmooth15 Posts: 155Banned
    Great Job! Glad you walked away with that PASS.
  • RouteMyPacketRouteMyPacket Posts: 1,104Member
    Congrats!

    What's up next?
    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
  • Vask3nVask3n Posts: 517Member
    Thanks guys! I am trying to figure out whether to jump into SECURE right now and finish before April or wait until the new material is out, I've heard some mixed information about the OCG for SECURE and I understand it's not a walk in the park. I did FIREWALL and VPN in about a month's time each and am a little burned out but I don't want to lose momentum.
    Working on MS-ISA at Western Governor's University
  • Heracles004Heracles004 Posts: 50Member ■■□□□□□□□□
    Congrats !!! I would say keep it moving. There is two of us trying to complete before the expiration. With 3 of us it could turn out to be a good informational thread. I have already started some of the INE videos and labbed a zone based firewall setup. My goal is to get as much accomplished as I can while my job is paying for them. I plan on testing within a month. Unfortunately I'm in a Microsoft course for the next two months but ill make do.
  • Vask3nVask3n Posts: 517Member
    That's definitely inspiring, now I want to suck it up and move forward. It feels kind of strange moving from an exam with 5 pages of exam topics (VPN) to an exam with one page of very dense exam topics (SECURE).
    Working on MS-ISA at Western Governor's University
  • wintermute000wintermute000 Posts: 172Banned
    the book isn't very good, but as its good old IOS, its incredibly easy to lab.

    Just get a few routers together and run over the following thoroughly
    - all the router sec stuff (CoPP etc.)
    - standard IPSEC vpns
    - VTI based IPSEC vpns
    - DMVPN
    - Zone Based FW

    and you're gold

    re: the new exams, if you do that you'll be in no man's land and have to do all the other new exams anyway. I don't think you can certify as a CCNP-S if you say do 3 old exams and 1 new exam (though DYOR but most of the time with Cisco thats how its worked IIRC). You can always finish the current track, then come back in a year and do one of the new exams to renew.
  • Master Of PuppetsMaster Of Puppets Posts: 1,210Member
    Честито/Congrats!

    Bear in mind that it is not certain when Cisco will come out with sufficient material for the new exams. However, there is a wealth of resources for the current version. It may take a few months and you may end up losing momentum. This is one of the reasons why I have decided to take SECURE before the deadline.
    Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.
  • FloOzFloOz Posts: 1,614Member ■■■■□□□□□□
    Congrats!!!!
  • RouteMyPacketRouteMyPacket Posts: 1,104Member
    Vask3n wrote: »
    Thanks guys! I am trying to figure out whether to jump into SECURE right now and finish before April or wait until the new material is out, I've heard some mixed information about the OCG for SECURE and I understand it's not a walk in the park. I did FIREWALL and VPN in about a month's time each and am a little burned out but I don't want to lose momentum.

    Get on it, stay focused...get right on SECURE and let me know if you need anything. It was a tough exam, probably the toughest for me and I honestly don't know why. I had some nerves on it and it's the only exam I ever felt like that, felt like I would pass but not do well..well I actually was still in the 900's so who knows why I was flipping a little.

    SECURE has some of the best topics out of the series. IPsec, DMVPN, GETVPN, GRE as these all come into play quite often when working at client sites. dot1x of course and if you work with ISE everyday the material will flow nicely.

    Control Plane, Data Plane, Mgmt Plane...some of this is redundant from CCNP R/S

    I think you got it, don't second guess yourself now. You are committed and April is more than enough time, how many do you have left? SECURE and IPS? Plenty of time and these will not burn you out as both cover widely different material with SECURE being the most important. I just never see Cisco IPS in use much.
    the book isn't very good, but as its good old IOS, its incredibly easy to lab.

    Just get a few routers together and run over the following thoroughly
    - all the router sec stuff (CoPP etc.)
    - standard IPSEC vpns
    - VTI based IPSEC vpns
    - DMVPN
    - Zone Based FW

    and you're gold

    Agreed!
    Modularity and Design Simplicity:

    Think of the 2:00 a.m. test—if you were awakened in the
    middle of the night because of a network problem and had to figure out the
    traffic flows in your network while you were half asleep, could you do it?
  • Vask3nVask3n Posts: 517Member
    Thanks RouteMyPacket and everyone. I've started taking notes for SECURE and am about half way through the CBT Nuggets. Ordered the OCG yesterday as well. I really need a physical book to go along with the rest of the training so I'll go with the same route I did for the previous two.
    Честито/Congrats!

    However, there is a wealth of resources for the current version. It may take a few months and you may end up losing momentum. This is one of the reasons why I have decided to take SECURE before the deadline.

    I totally see this benefit as well, the exam has been out for longer and as such there's already established content on it like INE, CBT Nuggets, and the written material.
    Working on MS-ISA at Western Governor's University
  • CCNPforSureCCNPforSure Posts: 11Member ■□□□□□□□□□
    congratz
  • maharalielmaharaliel Posts: 119Member
    Congrats
  • gregorio323gregorio323 Posts: 201Member ■■■□□□□□□□
    Vask3n wrote: »
    Thanks guys! I am trying to figure out whether to jump into SECURE right now and finish before April or wait until the new material is out, I've heard some mixed information about the OCG for SECURE and I understand it's not a walk in the park. I did FIREWALL and VPN in about a month's time each and am a little burned out but I don't want to lose momentum.

    I will admit OCG is a little hard to read. I went through so much stuff. CBT Nuggets/INE/OCG/Skillsoft. But I'd say my primary and most useful resource I've used and you'd probably hear me say this a lot but it was Skillsoft and if you can I'd say get ahead of the training modules. I'm fortunate enough to have worked for a consulting company that has not deactivated my account yet but I get tonts of free Cisco training via skillsoft.
  • Vask3nVask3n Posts: 517Member
    I will admit OCG is a little hard to read. I went through so much stuff. CBT Nuggets/INE/OCG/Skillsoft. But I'd say my primary and most useful resource I've used and you'd probably hear me say this a lot but it was Skillsoft and if you can I'd say get ahead of the training modules. I'm fortunate enough to have worked for a consulting company that has not deactivated my account yet but I get tonts of free Cisco training via skillsoft.

    I really appreciate the heads up on skillsoft, and thanks to everyone on this thread. I'm still working my way through this material- I don't think I will be able to complete this in one month's time like I did for both Firewall and VPN, I would rather take as much time as I can before April and then take the new IPS exam afterwards, which fortunately is an option on the migration path.

    I also understand the the configuration on SECURE is primarily through CLI, unlike FIREWALL and VPN, which makes sense since the ASDM is for the ASA and now the paradigm is routers and switches instead of firewalls.
    Working on MS-ISA at Western Governor's University
  • PCHoldmannPCHoldmann Posts: 450Member
    Congrats!
    There's no place like ^$
    Visit me at Route, Switch, Blog
Sign In or Register to comment.