In this post, we’ll look at the top 5 networking credentials you need to obtain in 2020. Let’s discuss them right away.

1. Wireshark Certified Network Analyst – WCNA

Wireshark University was founded in 2007. The institution provides one certificate, but it’s going to be worth all the effort. WCNA validates the skills and knowledge of the network analysts by using Wireshark and network security, network troubleshooting, and TCP/IP network communications. To get this certification, the students must pass one exam. The WCNA-102.x test consists of 100 multiple-choice questions that you must complete in 2 hours. You also need to pay a fee of $299.

This credential is valid for three years, and you should get 20 continuing professional education credits every year to maintain it. The credits must focus on functions associated with the WCNA exam domains such as analysis and sniffing. You can participate in the Black Hat conference or SharkFest. You may also need to study for the test with the training program to get the CPEs.

2. SolarWinds Certified Professional – SCP

SolarWinds is a tech company based in Austin. This organization allows the IT professionals and businesses to get access to tools, solutions, and products. They use these resources to enhance performance, monitor, and find solutions to real-world issues. SolarWinds provides solutions in various areas, such as system management, network management, security database management, Cloud, and IT help desk.

Currently, the company provides one certification, known as SCP (SolarWinds Certified Professional). The credential is designed to prove one’s expertise, knowledge, and skills in using the network management product portfolio or SolarWinds system management. The students can opt to test for the certificate on the Server and Application Monitor or the Network Performance Monitor paths. In any case, they need to pass one exam. The certification test includes 75 questions that should be answered within 90 minutes.

The company seeks to ensure that the SCP holders maintain their knowledge base. This is because new technology products are being produced. To achieve this, SolarWinds obliges the certified specialists to uphold the SolarWinds subscription. The professionals with the SCP certification are required to attend training and events organized by this organization. With this subscription, the individuals get access to online training courses, are invited to online and in-person events, get improved support and a chance to study with the SolarWinds experts. You need to pay $200 as a yearly subscription. The SCP credential expires after 3 years in case an applicant doesn’t maintain the subscription and doesn’t take part in the training.

3. CompTIA Network+

It is an entry-level certification. It is designed for the individuals in the IT industry who want to upgrade their resume. It is also meant for the beginners in the networking field. This vendor-neutral certificate serves as a springboard for many professional networking credentials. Given that it is an entry-level certification, there are no requirements for taking the CompTIA N10-007 test. The exam contains 90 questions, and the duration for completing it is 90 minutes. Furthermore, there are numerous resources that will help you prepare for this test. Also, please note that you’ll need to pay $329.

4. Cisco Certified Network Professional – CCNP

CCNP is available in different paths, such as Enterprise, Collaboration, Security, Service Provider, Data Center, and Cisco Certified DevNet Professional. To get any credentials in these categories, the individuals must first obtain CCNA. After earning CCNP for the networking professionals, you can proceed to pursue another specialty in the CCNP tracks. If you are planning to earn CCNP Enterprise, for example, you’re required to pass one core exam (350-401 ENCOR) and one from six available concentration tests.

Remember, Cisco recently updated its certification program by retiring some certificates and introducing new ones. These new changes took effect on February 24, 2020. CCNA, CCNP, and CCIE were affected. For example, the most popular CCNA R&S and CCNP R&S credentials have been retired and replaced with other certifications. The replacements are CCNA Enterprise and CCNP Enterprise, respectfully.

5. Cisco Certified Internetwork Expert – CCIE

It is among the top-paying networking certifications. It involves a number of critical networking paths. These tracks include Enterprise Infrastructure, Enterprise Wireless, Data Center, Security, Service Provider, Collaboration, and CCDE. It’s important to point out that getting this credential requires rigorous and serious work. However, the outcome is worth the investment and effort.

The Cisco CCIE certificates have the capability to open many job opportunities and high earning potential. To obtain one, you need to pass some exams. There are no specific requirements for taking the written test. Once you pass it, you can sit for the lab exam. You must pass the written test to qualify for the lab one. If you don’t pass this hands-on exam within 3 years, you will need to take it again.

Conclusion

There are numerous options for the networking experts to pursue apart from these five. For instance, you can take the Open Linux Networking credential, known as CCONP (Cumulus Certified Open Networking Professional). Even though it’s not available in our list, JNCIE-ENT (Juniper Enterprise Routing and Switching – Expert) is another great certification for those specialists who want to learn about Juniper technologies.

As you can see, the networking professionals have many credentials to consider. Please note that an IT certification can create a huge difference in one’s career advancement. 2020 seems to have many surprises for the IT industry. If you want to advance your career in this field, you need to take these top networking certificates. Get ready to pass one or two tests and take advantage of numerous possibilities in your IT career. It’s good to point out that getting the credentials is challenging. Therefore, you need to use the right study materials to prepare for the prerequisite exams.

The fact is that each software comes with its own pros and cons, and understanding all of these factors will help you make an informed decision without relying solely on the opinions of others. In this blog post, we will analyze two simulators (Boson NetSim, Cisco Packet Tracer) and three emulators (EVE-NG, GNS3, and VIRL). It’s important to mention that they are well-known network tools that can help you gain the Cisco lab experience you need for your routing and switching certification exams. But before we delve into the details of these simulators and emulators, it is important to understand the difference between them.

The main difference between Simulators and Emulators

As the name indicates, a simulator simulates a network topology that is composed of at least one network device. This means it can consist of more than one network device. The one that is being simulated is actually not real and does not have the ability to pass live network traffic just like the real one. In other words, a simulated network device is a software that pretends to be a real one as much as it can. Due to the fact that it is not real, it is limited to the features and commands that have already been programmed into the simulation. The major advantage of simulators is that they are highly lightweight and can run on almost any contemporary computer system without being distressed about storage requirements, memory, or processor.

On the other hand, an emulator connects and runs a combination of network devices. It virtualizes real devices, and in the real sense of the word, virtual network devices usually provide more advanced attributes compared to the simulated ones. The characteristics of emulated virtual network devices are closer to real physical ones, which is the major difference between a simulator and an emulator.

The best Simulators and Emulators for Cisco exams

Now that we know the difference between these network tools, let’s explore the details of each software that we mentioned.

• Boson NetSim

Boson NetSim is a product of Boson, an IT training company known for its high-quality coursework and practice tests for the Cisco certification exams. This product is an application designed to simulate Cisco network routers & switches. It is important to mention that Boson NetSim is a paid network simulator. However, it has some significant advantages that offer value for the money you pay for it. Some of these benefits include the quality of labs; customized lab distribution; licensing maps for the exams; lab accessibility; device customization; less clicking (when compared to Packet Tracer), and realistic terminal features.

Although Boson NetSim has some great advantages, it definitely has some disadvantages as well. They include the lack of a simulation mode; absence of topology information and customization; unavailability of cross-platform compatibility; and inability to modify the active topology.

• Packet Tracer

Packet Tracer is designed to simulate network topologies covering Cisco routers, switches, and firewalls. It is essential to mention that this product was first developed to support Cisco NetAcad (Networking Academy). However, it has become a great simulator for those individuals who want to earn the credentials from Cisco such as CCENT and CCNA Routing & Switching. It is also important to mention that Packet Tracer is a free simulator but this doesn’t mean it lacks benefits. Some of the advantages of this tool include device variety; cost; cross-platform compatibility; realistic terminal; connection variety; simulation mode; customized exercise creation. It makes the lab realistic. Some of the shortcomings of Packet Tracer are bugs, customized exercise distribution, the lack of in-built labs.

No doubt, Packet Tracer is the gold standard for the Cisco virtual network simulators. Although it’s free, it still provides a rich sand-box setting that is perfect for experimenting with a wide range of network device types, connections, and platforms. In addition to this, it demonstrates the closest characteristics to real network devices. Its in-built terminal client is also very close to the real device.

• GNS3

GNS3 (Graphical Network Simulator-3) is an open-source client-server interface designed for network virtualization and emulation. It is a Python-based platform that basically uses software known as Dynamips for emulating Cisco hardware and software. GNS3 supports the same platforms that Dynamips supports, including Cisco 1700; 2600; 2691; 3600; 3725; 3745; as well as 7200. This emulator has grown in recent years to support a wider scope of virtual network devices of different vendors. It has quite a number of benefits, which include cost because it is free; multiple connection types; community labs; simple and easy to read documentation; ability to modify the active topology. Its primary shortcoming is that it doesn’t come with prepackaged virtual network devices, which means you need to have the Cisco IOS software image, compatible with the GNS network emulator.

• VIRL

Virtual Internet Routing Lab (VIRL) is the proprietary virtual network emulator of Cisco. It is designed for the individuals and the education institutions. It functions in a client-server model that is close to GNS3. Its server can either be installed as a virtual machine or on a bare metal server. The advantages of VIRL include the availability of software images, advanced automation capabilities, and network topology portability. The disadvantages are as follows: cost because it is not cheap; no serial interfaces; inability to modify the active topology; resource requirements.

• EVE-NG

Emulated Virtual Environment Next Generation (EVE-NG) is a multi-vendor virtual network emulator that operates like VIRL Personal Edition. It was created for the individuals and the small business owners. There are two editions available, which are Community and Professional. It is essential to mention that the Professional Edition comes at a price. The benefits of the EVE-NG network emulator include the availability of free version; ability to modify the active topology; clientless; multi-connection types. The disadvantages are the unavailability of software images and documentation issues.

Conclusion

This was the list of the best network simulators and emulators that you can use for you Cisco exam preparation. The choice depends on your preferences, so it all up to you. Choose wisely and let the tool help you with your preparation process.

This is indeed an exciting news and the demand for these credentials is huge. There’s little wonder as more and more companies switch to the cloud. And with the long-overdue debate about the public, private and hybrid cloud and all that confusion that surrounds this area of technology, these companies are looking to hire cloud professionals with proven skill set and track record. This is why the new Cisco credentials are a great way to get the validation of your expertise in the cloud, as well as to deepen your skills and understanding of Cisco cloud technology. Now, let’s take a closer look at both credentials to see what we know so far.

CCNA Cloud

CCNA Cloud certification is a job role focused certification that helps Cloud engineers, Cloud Administrators, and Network Engineers to develop, advance, and validate their cloud skill set, and enables them to help their IT organization meet changing business demands from technology transitions. This associate-level certification will help candidates obtain the skills to perform entry-level provisioning and support of Cisco cloud solutions. Learn from the only company that has an end-to-end Cloud and Intercloud story.

To become a CCNA Cloud, candidates need to pass two exams, of which only one is available (as of June 2015):

• 210-451 CLDFND              Understanding Cisco Cloud Fundamentals (CLDFND)
• 210-455 CLDADM            Introducing Cisco Cloud Administration (CLDADM), more info to come in July 2015.

CCNP Cloud

CCNP Cloud certification is expected to be launched this month, and the prerequisite for it is having achieved the CCNA Cloud. This professional level credential is targeted at Cloud engineers, Cloud Administrators, Cloud Designers, and Architects working in Data Centers. This program delivers the knowledge and skills necessary to design, provision, automate and manage Cloud and Infrastructure-as-a-Service deployments. Learn from the only company that has an end-to-end Cloud and Intercloud story.

CCNP Cloud Exams (more information will be released in August)

• 300-504 CLDINF               Implementing and Troubleshooting the Cisco Cloud Infrastructure (CLDINF)
• 300-505 CLDDES               Designing the Cisco Cloud (CLDDES)
• 300-506 CLDAUT              Automating the Cisco Enterprise Cloud (CLDAUT)
• 300-507 CLDDACI            Building the Cisco Cloud with Application Centric Infrastructure (CLDDACI)

ExamCollection will keep updating you as soon as new information starts coming in. We are excited about these certifications (both of which are set to become Cisco’s next best-sellers), and we’re looking forward to your success stories once the certifications become widely available.

The same happens with CCNP Voice and CCNP Video – they become CCNP Collaboration. That’s right! CCNA Voice and CCNA Video certifications will be retired in August this year, and the new CCNA Collaboration is already available, with the first candidates already having taken the exam.  More information about CCNP Collaboration is coming soon (April 2015, according to Cisco). Overall, the new Cisco collaboration certification strategy targets engineers who implement, configure, deploy and troubleshoot collaboration and communication infrastructures.

So far, the Cisco Collaboration exams are:

CCNA Collaboration Exams:
210-060 CICD – Implementing Cisco Collaboration Devices

Cisco 210-060 CICD exam contains 55-56 queries testing candidates’ knowledge of Cisco Unified Communications (UC) solutions. This includes solid understanding of administrator and end-user interfaces, telephony and mobility features, as well as Cisco Unified Communications solutions maintenance.

Cisco Exam 210-060 Topics:

• The Characteristics of a Cisco Unified Communications Solutions – 15%
• Provision End Users and Associated Devices – 24%
• Configure Voice Messaging and Presence – 27%
•  Maintain Cisco Unified Communications System – 10%
• Provide End User Support – 24%

210-065 CIVND – Implementing Cisco Video Network Devices

210-065 CIVND  exam queries cover knowledge and skills to implement various Cisco Video endpoints in converged Cisco video infrastructures. It also tests your ability to implement and troubleshoot Cisco Unified Communication and Collaboration, TelePresence, and Digital Media Player in different Cisco business video solution architectures.

• Video Concepts – 21%
• Endpoint Configuration – 32%
• Troubleshooting and Support – 31%
• Conferencing Concepts – 16%

Both 210-060 and 210-062 exams take 75 minutes each and contain up to 65 queries. Although these exams have been around for a while, apparently they have been enhanced to contain some concepts previously covered by CCNA Voice and CCNA Video certifications.

CCNP Collaboration Exams (Further details will be announced in April 2015):

• 300-070 CIPTV1         Implementing Cisco IP Telephony and Video, Part 1
• 300-075 CIPTV2         Implementing Cisco IP Telephony and Video, Part 2
• 300-080 CTCOLLAB         Troubleshooting Cisco IP Telephony and Video
• 300-085 CAPPS         Implementing Cisco Collaboration Applications

Stay tuned for more updates about Cisco’s new Collaboration strategy and other Cisco news!

So what’s in the new CCNP Routing and Switching v2.0?

The new CCNP Routing and Switching targets to provide candidates with more current topics and forward-looking approaches. For example, it pays close attention to how IPv6 addresses workforce mobility and the proliferation of Internet-connected devices. The refreshed exams also include network scale support and accommodating the continued growth of IoT (Internet of Things, see below).

The refreshed CCNP R&S validates that you have the skills to plan, implement, verify and troubleshoot complex network solutions The new CCNP Routing and Switching exams are:

• Implementing Cisco IP Routing (300-101)
• Implementing Cisco IP Switched Networks (300-115)
• Troubleshooting and Maintaining Cisco IP Networks (300-135)

Overall, Cisco is stepping up the level of CCNP Routing and Switching credential, bringing it closer to the expert level, as well as other CCNP certifications. CCNP R&S updates have been long overdue, so now CCNP Routing and Switching has been brought up to the same level with other CCNP-level credentials, such as Data Center, Security and Voice.

The new CCNP Routing and Switching 2.0 curriculum emphasizes IPv6, including running dual-stack IPv4 and IPv6 networks. Cisco believes that since the IPv6 demand will keep growing, needs to be matched accordingly. There is also a strengthening emphasis on the Internet of things (IoT) that exists in the form of manufacturing sensors, household gadgets, and other devices that require network connection.

In the new version of CCNP Routing and Switching, Cisco requires candidates to be proficient in StackWise and Virtual Switching Service (VSS) technologies. Both are used to make multiple physical switches behave like a single switch, but there are a number of design considerations and implementation details that impact their behavior in production networks.

Another thing to keep in mind while looking at the new version of CCNP Routing and Switching certification is DMVPN (Dynamic multipoint virtual private network). This technology creates an overlay of secure tunnels across public or leased networks, and it has also been added to the CCNP Routing & Switching track.

So if you’re toying with the idea of adding the CCNP Routing and Switching credential to your professional profile, you should definitely focus on the Version 2.0. for all (ROUTE, SWITCH, TSHOOT) exams. The blueprints are available here. You may also want to check out our IT certification community to see whether anyone from your fellow Cisco professionals have already taken these new exams. Good luck!

According to Cisco, the new CCNP Routing and Switching targets to provide candidates with more current topics and forward-looking approaches. For example, it pays close attention to how IPv6 addresses workforce mobility and the proliferation of Internet-connected devices. The refreshed exams also include network scale support and accommodating the continued growth of IoT (Internet of Things, see below).

The refreshed CCNP R&S validates that you have the skills to plan, implement, verify and troubleshoot complex network solutions The new CCNP Routing and Switching exams are:

• Implementing Cisco IP Routing (300-101)
• Implementing Cisco IP Switched Networks (300-115)
• Troubleshooting and Maintaining Cisco IP Networks (300-135)

The current CCNP Routing and Switching exams can be taken until January 29, 2015. So, until that date, to achieve your CCNP R&S certification, you need to take and pass 3 exams:

• 642-902 ROUTE (Last day to test: January 29, 2015) OR 300-101 ROUTE
•  642-813 SWITCH (Last day to test: January 29, 2015) OR 300-115 SWITCH
•  642-832 TSHOOT (Last day to test: January 29, 2015) OR 300-135 TSHOOT

After January 29, only 300-101 ROUTE, 300-115 SWITCH and 300-135 TSHOOT will be available for CCNP Routing and Switching candidates. Before that date, Cisco allows candidates to mix and match old and new exams, so, for example, you can take the old version of the ROUTE, the new version of the SWITCH and any version of the THOOT – or any other combination of the old and new exams.

So What Is the Change About?

Overall, Cisco is stepping up the level of CCNP Routing and Switching credential, bringing it closer to the expert level, as well as other CCNP certifications. CCNP R&S updates have been long overdue, so now CCNP Routing and Switching has been brought up to the same level with other CCNP-level credentials, such as Data Center, Security and Voice.

The new CCNP Routing and Switching 2.0 curriculum emphasizes IPv6, including running dual-stack IPv4 and IPv6 networks. Cisco believes that since the IPv6 demand will keep growing, needs to be matched accordingly. There is also a strengthening emphasis on the Internet of things (IoT) that exists in the form of manufacturing sensors, household gadgets, and other devices that require network connection.

In the new version of CCNP Routing and Switching, Cisco requires candidates to be proficient in StackWise and Virtual Switching Service (VSS) technologies. Both are used to make multiple physical switches behave like a single switch, but there are a number of design considerations and implementation details that impact their behavior in production networks.

Another thing to keep in mind while looking at the new version of CCNP Routing and Switching certification is DMVPN (Dynamic multipoint virtual private network). This technology creates an overlay of secure tunnels across public or leased networks, and it has also been added to the CCNP Routing & Switching track.

Conclusion

This is a huge update for this challenging certification, but, as usual, Cisco accompanies the changes with comprehensive blueprints that list all topics and the weight they carry on each exam. You may find the blueprints here.

Last but not least, be sure to visit our partner for latest real estate offers, including sales and rentals of property in Asia.

The new CCNP Security program targets Cisco Network Security Engineers responsible for Security in Routers, Switches, Networking devices and appliances, as well as choosing, deploying, supporting and troubleshooting Firewalls, VPNS, and IDS/IPS solutions for their networking environments.

The 300-207 Implementing Cisco Threat Control Solutions (SITCS) exam validates the skills of a network security engineer on advanced firewall architecture and configuration with Cisco’s Next Generation Firewall (NGFW). This exam covers integration of Intrusion Prevention System (IPS) and context-aware firewall components, as well as Web (Cloud) and Email Security solutions. Candidates can prepare for this exam by taking the Implementing Cisco Threat Control Solutions (SITCS) course.

Like 300-206 and most other Cisco exams, 300-207 is a closed book exam, with no reference materials being allowed. According to Cisco, 300-207 covers the following topics:

1.0 Content Security (22%)

1.1 1.1 Implement Cisco CX

• 1.1.1 1.1.a Describe features and functionality
• 1.1.2 1.1.b Implement web usage control
• 1.1.3 1.1.c Implement AVC
• 1.1.4 1.1.d Implement decryption policies
• 1.1.5 1.1.e Describe traffic redirection and capture methods

1.2 1.2 Implement Cisco Cloud Web Security

• 1.2.1 1.2.a Describe features and functionality
• 1.2.2 1.2.b Implement IOS and ASA connectors
• 1.2.3 1.2.c Implement AnyConnect web security module
• 1.2.4 1.2.d Describe web usage control
• 1.2.5 1.2.e Describe AVC
• 1.2.6 1.2.f Describe anti-malware
• 1.2.7 1.2.g Describe decryption policies

1.3 1.3 Implement Cisco WSA

• 1.3.1 1.3.a Implement data security
• 1.3.2 1.3.b Describe traffic redirection and capture methods

1.4 1.4 Implement Cisco ESA

• 1.4.1 1.4.a Describe features and functionality
• 1.4.2 1.4.b Implement email encryption
• 1.4.3 1.4.c Implement anti-spam policies
• 1.4.4 1.4.d Implement virus outbreak filter
• 1.4.5 1.4.e Implement DLP policies
• 1.4.6 1.4.f Implement anti-malware
• 1.4.7 1.4.g Implement inbound and outbound mail policies
• and authentication
• 1.4.8 1.4.h Describe traffic redirection and capture methods

2.0 Threat Defense (23%)

• 2.1 Implement network IPS
• 2.1.a Describe traffic redirection and capture methods
• 2.1.b Configure network IPS
• 2.1.c Describe signatures
• 2.1.d Implement event actions
• 2.1.e Configure event action overrides
• 2.1.f Implement risk ratings
• 2.1.g Describe router-based IP

2.2 Configure Device Hardening per Best Practices

• 2.2.a IPS
• 2.2.b Content Security appliances
• 2.3 Implement Network IPS
• 2.3.a Describe signatures
• 2.3.b Configure blocking
• 2.3.c Implement anomaly detection

3.0 Devices GUIs and Secured CLI (16%)

• 3.1 Implement Content Security

4.0 Troubleshooting, Monitoring and Reporting Tools (19%)

• 4.1 Configure IME and IP logging for IPS
• 4.2 Monitor Content Security
• 4.3 Monitor Cisco Security intelliShield

5.0 Threat Defense Architectures (8%)

• Design IPS solution

6.0 Content Security Architectures (12%)

• 6.1 Design web security solution
• 6.2 Design email security solution
• 6.3 Design application security solution

Explore Cisco VCE files at Examcollection!

As we mentioned earlier

Today, we take a closer look at the 300-206 (SENSS) exam: Implementing Cisco Edge Network Security Solutions. It validates the candidates’ knowledge required to configure and implement security on Cisco network perimeter edge devices such as a Cisco Switch, Cisco Router, and Cisco ASA Firewall. The 300-206 exam focuses on the technologies used to secure the perimeter of a network such as Network Address Translation (NAT), ASA policy and application inspect, and Zone-Based Firewall on Cisco routers. Like most Cisco exams, this is a closed book exam, with the usual Cisco types of questions: Multiple-Choice Single Key, Multiple-Choice Multiple Key, Drag-and-Drop, Fill-in-the-Blank, Router Simulation, Testlet Queries, Simlet.

According to Cisco, the current version of the 300-206 exam includes the following topics.
Threat Defense (25%)
• 1.1 Implement Firewall
• 1.1.a Implement ACLs
• 1.1.b Implement static/dynamic NAT/PAT
• 1.1.c Implement object groups
• 1.1.d Describe threat detection features
• 1.1.e Implement Botnet traffic filtering

• 1.2 Implement Layer 2 security
• 1.2.a Configure DHCP snooping
• 1.2.b Describe dynamic ARP inspection
• 1.2.c Describe storm control
• 1.2.d Configure port security
• 1.2.e Describe common layer 2 threats and attacks and mitigation
• 1.2.f Describe private VLAN
• 1.2.g Describe MACSec

• 1.3 Configure device hardening per best practices
• 1.3.a Routers
• 1.3.b Switches
• 1.3.c Firewalls

• 1.4 Implement Firewalls
• 1.4.a Configure application filtering and protcol inspection
• 1.4.b Describe virtualized firewalls

Cisco Security Devices GUIs and Secured CLI Management (25%)
• 2.1 Implement SSHv2, SSL, SNMPv3 access on the network devices
• 2.2 Implement RBAC on the ASA/IOS CLI and on ASDM
• 2.3 Describe Cisco Prime Infrastructure
• 2.4 Describe CSM
• 2.5 Implement device managers

Management Services on Cisco Devices (12%)
• 3.1 Implement NetFlow exporter
• 3.2 Implement SNMPv3
• 3.3 Implement logging
• 3.4 Implement NTP with authentication
• 3.5 Describe CDP, DNS, SCP, SFTP, and DHCP

Troubleshooting, Monitoring and Reporting Tools (10%)
• Monitor firewall using analysis of packet tracer, packet capture, and syslog

Threat Defense Architectures (16%)
• 5.1 Design a firewall solution
• 5.2 Design Layer 2 security solution

Security Components and Considerations (12%)
• 6.1 Describe security operations management architecture
• 6.2 Describe Data Center Security components and considerations
• 6.3 Describe Collaboration security components and considerations
• 6.4 Describe common IPv6 security considerations

In 2014, Cisco strives to address the skill deficit in network security given the challenges of cloud and mobility, by providing network security engineers, analysts, and product specialists with development opportunities. The announced changes include:

• Launch of the redesigned CCNP Security certification program
• Launch of the new Cisco Cybersecurity Specialist certification
• Announcement of the retirement of the existing Cisco Security Specialist certifications
• New and updated product training courses

In this post, we’ll take a closer look at the redesign of CCNP Security certification program, which also includes the retirement of a number of exams.

CCNP Security Certification Program Redesign

The redesign of the CCNP Security certification reflects the skills and responsibilities required of today’s network security engineers, who increasingly require a holistic end-to-end understanding of a complete security posture.

The new training courses and labs that are being provided as part of the redesigned certification will utilize a common topology and have been created to complement one another, allowing engineers to grow their skills in harmony with their careers as they progress through the certification.

The following exams and corresponding training courses are available for registration worldwide:

300-206 Implementing Cisco Edge Network Security Solutions (SENSS)     

The 300-206 (SENSS)exam tests the knowledge of configuring and implementing security on Cisco network perimeter edge devices such as a Cisco Switch, Cisco Router, and Cisco ASA Firewall. This exam focuses on the technologies used to secure the perimeter of a network such as Network Address Translation (NAT), ASA policy and application inspect, and Zone-Based Firewall on Cisco routers. Exam topics are available here.

300-207 Implementing Cisco Threat Control Solutions (SITCS)       

The 300-207 (SITCS) exam tests a network security engineer on advanced firewall architecture and configuration with Cisco’s Next Generation Firewall (NGFW) utilizing access and identity polices. This exam covers integration of Intrusion Prevention System (IPS) and context-aware firewall components, as well as Web (Cloud) and Email Security solutions. Take a look at the topics here.

300-208 Implementing Cisco Secure Access Solutions (SISAS)        

The 300-208 (SISAS) exam tests whether a network security engineer knows the components and architecture of secure access by utilizing 802.1X and TrustSec. This exam covers Cisco Identity Services Engine (ISE) architecture, solution and components as an overall network threat mitigation and endpoint control solutions. It also includes the fundamental concepts of BYOD using posture and profiling services of ISE. Exam topics available here.

300-209 Implementing Cisco Secure Mobility Solutions (SIMOS)    

The 300-209 (SIMOS) exam tests a network security engineer on the variety of Virtual Private Network (VPN) solutions that Cisco has available on the Cisco ASA firewall and Cisco IOS software platforms. The exam assesses the knowledge necessary to properly implement secure remote communications through VPN technology such as remote access SSL VPN and Site-to-Site VPN (DMVPN, FlexVPN). You can check the topics for this exam here.

Those who are already in the process of attaining their CCNP Security certification have the option of completing their remaining exams before the last date to test of April 21, 2014 or of migrating to the new exams, with credit applied for existing exams passed. More information about the migration path is available here.

Retired Exams

With the redesign of CCNP Security program and the launch of the new Cybersecurity Specialist certification, Cisco retires sits current CCNP Security exams. The following exams and certifications will be retired affective April 22, 2014. Therefore, the last day for taking these exams is April 21.

So, if you were planning to become a CCNP Security this year, you have every chance to get a newly updated certification which supposedly reflects the most current industry trends. Stay tunes as well explore the brand new Cisco Cybersecurity Specialist certification in our next post.

This is no secret that Cisco has significantly revamped its certification program, especially CCENT and CCNA, earlier this year. Originally announced in late March, the changes and new CCNA tracks were fully implemented this fall.

So, these are the Cisco certification levels we’re looking at now:

Entry Certifications

• CCENT
• CCT (CCT Data Center; CCT Routing & Switching; CCT TelePresence)

Associate Certifications

• CCNA Routing and Switching
• CCDA
• CCNA Data Center
• CCNA Security
• CCNA Service Provider
• CCNA Service Provider Operations
• CCNA Video
• CCNA Voice
• CCNA Wireless

Professional Certifications

• CCDP
• CCNP
• CCNP Data Center
• CCNP Security
• CCNP Service Provider
• CCNP Service Provider Operations
• CCNP Voice
• CCNP Wireless

Expert Certifications

• CCDE
• CCIE Collaboration
• CCIE Data Center
• CCIE Routing & Switching
• CCIE Security
• CCIE Service Provider
• CCIE Service Provider Operations
• CCIE Voice (Retiring February 13, 2014)
• CCIE Wireless

Architect Certification –  CCAr

What has changed in 2013?

If you are collecting information about CCENT and CCNA from message boards and brain dumps, be sure you’re looking at the updated 2013 data. This is important as CCENT and CNAA appear to have been changed the most.

What we hear may be sad news to many out there: CCENT (ICND1; exam 100-101, which can also be part of your CCNA R&S) has gotten harder – significantly. Subjects added, especially the labs, go more in depth and cover a lot more aspects (including lots of IPv6 stuff) compared to the old CCNA. CCENT Certification hasn’t been a joke before and it has gotten much further from being one now! This certification is also now a prerequisite for most CCNA certifications (except CCNA R&S, CCNA Data Center and CCNA Service Provider).

The Associate level programs, according to Cisco, have been redesigned to better fit the industry needs and the roles networking professionals need to fill. Yes, it means even more practical hands on stuff. To achieve advanced technology certification in an accelerated manner, you now need to pass only two required exams.

As upper certification levels haven’t been affected by the changes to such a degree (we’ll go over them in separate articles), another change to the Cisco certification structure would be the new recertification timeframes.

Renewal and Recertification Timeframes

If you decide to settle on your already achieved certification and do not intend to go up another level any time soon, keep in mind that Cisco Entry, Associate and Professional level certifications last for 3 years. When this time is up, you will have to renew it. Meanwhile, all CCIE and Specialist certifications last for 2 years. And in you’ve made it all the way up the Cisco scale and are now Cisco Certified Architect (no words are enough to express the respect you deserve for that!), your awe-inspiring certification will need to be renewed after 5 years.

A gentle reminder that if you do not register and pass your Cisco recertification exam before your certification expires, you will have to repeat the entire certification process. Now, you do don’t want to challenge yourself this much, do you?

And for those of you planning to recertify, here’s your Recertification Roadmap:

Specialist Recertification Roadmap

Collaboration  

• Cisco Unified Presence Specialist
• Cisco Unity Design Specialist
• Cisco Unity Support Specialist

Data Center      

• Cisco Data Center Application Services Design Specialist
• Cisco Data Center Application Services Support Specialist
• Cisco Data Center Storage Networking Design Specialist
• Cisco Data Center Storage Networking Support Specialist
• Cisco Data Center Unified Computing Design Specialist
• Cisco Data Center Unified Computing Support Specialist

Operating System Software     

• Cisco IOS XR Specialist

Security              

• Cisco ASA Specialist
• Cisco Firewall Security Specialist
• Cisco IOS Security Specialist
• Cisco IPS Specialist
• Cisco Network Admission Control Specialist
• Cisco VPN Security Specialist

Video  

• Cisco Video Network Specialist
• Cisco Rich Media Communications Specialist
• Cisco TelePresence Solutions Specialist

Retired Certifications

This year, Cisco has retired 6 certifications:

• CCIE Storage Networking
• Cisco Data Center Networking Infrastructure Design Specialist
• Cisco Data Center Networking Infrastructure Support Specialist
• Cisco Data Center Storage Networking Design Specialist
• Cisco Data Center Storage Networking Support Specialist
• Cisco TelePresence Installations Specialist

All of these retired certifications have relevant replacement available, so you can easily find a new destination for your Cisco journey.

Which Cisco certification do you have your eyes on now? Feel free to tell us in the comments. And – although the road can get bumpy sometimes, remember to keep your eyes on the prize.