CCIE Security Practice Labs (CCIE Self-Study) (Practical Studies) (Hardcover)

~ Yusuf Bhaiji (Author)

Editorial Reviews

Product Description

Seven comprehensive CCIE security labs to hone configuration and troubleshooting skills

Prepare for the CCIE Security lab exam and hone your security configuration and troubleshooting skills with seven complete practice scenarios that cover:

• Basic device configuration
• Routing configuration
• ISDN configuration
• Cisco PIX Firewall configuration
• VPN configuration, including IPSec, GRE, L2TP, and PPTP
• VPN-3000 Concentrator configuration
• Intrusion Detection System (IDS) 42xx Appliance configuration
• Cisco IOS Firewall configuration
• AAA configuration
• Advanced security issues
• IP services and protocol-independent features
• Security violations

The explosive growth of the Internet economy over the past several years and new IP-based enterprise applications has heightened requirements for continuous availability of mission-critical data. Today's network administrators and managers are under big pressure to satisfy ever-increasing demands from customers, suppliers, and employees for 100 percent network resource availability and access to applications and data. The end result is that the cost of a network security breach has never been higher. Accordingly, the demand for networking professionals with expert-level network security configuration and troubleshooting skills is also great. The Cisco Systems CCIE Security certification is a prestigious program that sets the professional benchmark for internetworking expertise, validating proficiency with advanced technical skills required to design, configure, and maintain a wide range of network security technologies.

CCIE Security Practice Labs provides a series of complete practice labs that mirror the difficult hands-on lab exam. Written by a CCIE Security engineer and Cisco Systems CCIE proctor, this book lays out seven end-to-end scenarios that are both complex and realistic, providing you with the practice needed to prepare for your lab examination and develop critical-thinking skills that are essential for resolving complex, real-world security problems. While many engineers are able to configure single technologies in standalone environments, most will struggle when dealing with integrated technologies in heterogeneous environments.

CCIE Security Practice Labs consists of seven full-blown labs. The book does not waste time covering conceptual knowledge found in other security manuals, but focuses exclusively on these complex scenarios. The structure of each chapter is the same, covering a broad range of security topics. Each chapter starts with an overview, equipment list, and general guidelines and instructions on setting up the lab topology, including cabling instructions, and concludes with verification, hints, and troubleshooting tips, which highlight show and debug commands. The companion CD-ROM contains solutions for all of the labs, including configurations and common show command output from all the devices in the topology."Security is one of the fastest-growing areas in the industry. There is an ever-increasing demand for the experts with the knowledge and skills to do it."-Gert De Laet, Product Manager, CCIE Security, Cisco Systems

CCIE Security Practice Labs is part of a recommended study program from Cisco Systems that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press.

Companion CD-ROMThe CD-ROM contains the solutions to the seven complete lab scenarios in the book including configurations and show command output.

This volume is part of the Cisco Press Practical Studies Series, which offers readers a means to apply their theoretical knowledge through hands-on lab scenarios for key networking technologies. This unique approach enables readers to practice and hone their internetworking skills while preparing for Cisco certification exams.

About the Author

Fahim Hussain Yusuf Bhaiji, CCIE #9305, has been with Cisco Systems, Inc. for over three years and is currently CCIE proctor in Cisco Systems' Sydney, Australia Lab and has recently been charged with the management of content development for the Security CCIE. Prior to this, he was Technical Lead for the Sydney TAC Security and VPN team.

Yusuf's passion for Security and VPN related technologies has played dominant role in his 12 years of industry experience, from as far back as his initial Masters Degree in Computer Science, and since reflected in his numerous certifications.

Yusuf prides himself in his knowledge sharing abilities, evident in the fact that he has mentored many successful CCIE candidates, as well as having designed and delivered a number of Security and VPN related courses, around the globe.

Product Details

• Hardcover: 552 pages
• Publisher: Cisco Press (March 5, 2004)
• Language: English
• ISBN-10: 1587051346
• ISBN-13: 978-1587051340
• Product Dimensions: 8.9 x 7.2 x 1.4 inches
• Shipping Weight: 2.2 pounds
• Average Customer Review: 4.4 out of 5 stars  See all reviews (8 customer reviews)
• Amazon.com Sales Rank: #1,043,073 in Books (See Bestsellers in Books)

  Popular in this category: (What's this?)

  #35 in

  Books > Computers & Internet > Certification Central > Exams > CCIE

Customer Reviews

Most Helpful Customer Reviews

6 of 8 people found the following review helpful:

2.0 out of 5 stars full of mistakes, June 6, 2004

By	Uwe (Silicon Valley, USA) - See all my reviews

I am disappointed with this book!! Full of mistakes!
Example lab 1: Advertising a route into RIP ver 1 does not work if the major net on the interface has a different subnet mask then the subnet he tries to advertise to R5. What he is trying to accomplish is nonsense! You cant advertise a route if it is in the rip database by just creating a loopback interface on router R1!
Then further on OSPF why would he configure authentication on a loopback interface which is printed out on the CD under configuration examples? Quite frankly this book is not a 5* for sure. I bough it to prepare myself for the lab but I am looking forward what else I discover. So perhaps the author should publish some corrections or updates to this book!

Thanks!

1 of 1 people found the following review helpful:

4.0 out of 5 stars Great CCIE Lab tool, September 9, 2004

By	Paul Miller (Portland, OR) - See all my reviews

I recently read the book titled "CCIE Security Practice Labs (CCIE Self-Study)", by Yusuf Hussain Bhaiji. ISBN: 1587051346. This is a great book to use for preparing for the CCIE Security Lab. The main benefit that this book has to offer is that it allows the reader to think outside of the box and configure different Cisco network security devices and features in a way that would otherwise be overlooked.

The book is made up of 7 practice labs which are fairly equal in complexity. As the author states in the book, the labs are relatively straight forward, however it's the detail that one needs to pay attention to in order to help reinforce skills needed to pass the CCIE Security Lab.

Technologies covered in this book include a fairly good portion on general network features such as IP routing protocols (OSPF, EIGRP, BGP and RIP), a few data link layer WAN technologies (ISDN, Frame Relay), Firewall and Intrusion Detection scenarios as well as Authentication, Authorization and Accounting (AAA).

The labs give the reader a mixed bag of scenarios that is designed to challenge not just the configuration of each individual piece of the architecture, but more so the configuration of all features and protocols in a given unlikely scenario.

I like the way in which the book is laid out, because it is designed to allow the reader to really think through how to accomplish a given task by presenting the task in loose pseudo code verbiage.

There are adequate diagrams and screen prints that help map out the objective of each lab. Each lab has a diagram associated with it to help the reader understand visually, what is being accomplished. I think this helps a great deal when mapping the lab to ones memory.

After each lab, which is broken out into sections, the authors gives hints on how to accomplish what has been ask of the reader to build in the lab environment. Again, I like the format, because the answers are not given away fully. Causing the reader to comprehend what they are doing and not just pasting in configurations. However, for those who can't stand digging for answers, and like the answers upfront, a CD-ROM that contains the entire configuration for the lab is included with the book.

Each section of each lab is broken up into tasks and given a weight or points on successful accomplishment of that particular section. According to the word on the street, in the real CCIE Security LAB, if you miss one little detail on a section, you don't get any credit for that section. So you night have the section 75% right and 25% wrong, but you get 0% credit for that section. Which make the CCIE Lab a toughie. That's why it's all about the details, details, details.

CD-ROM contains lab configurations, but they're all contained in one ACSII file. Have to cut and paste out configuration and look for the output for each configuration. Would be better to have the output and configuration in separate files for separate devices. Each lab is kind of jammed into one file. Not pretty for viewing, but effective.

Overall I think this a good book to compliment Cisco Press strong documentation relating to network Security and to help someone achieve the coveted CCIE certification.

1 of 2 people found the following review helpful:

5.0 out of 5 stars Benefit of a doubt because ..., June 24, 2004

By	Michael L. Chin "Mikelou26" (Potomac, MD United States) - See all my reviews (REAL NAME)

I am a CCNP, CCDP and getting experience at work in Cisco ops. I am slowly pursuing CCIE as time permits.

I have brought this book and any other Cisco titles that will help me practice, practice, etc. So I have not gone thru any or all the labs. In fact I am currently pursuing the CCSP this year and practicing on my router/switches as time permits.

I have also ordered the CCIE practice R/S coming soon, and may pursue that first since I have much more gear. I don't have the PIX, VPN .... which is around another $5-7K but pretty close to what I need for ccie r/s. So why am I giving it 5 stars because other books/workbooks cost many times more than this. So the one interview which gave this a bad rap, he has dug into it and knows but this type of material usually is many times the cost of this book. If you have the gear, want to pursue ccie its worth it.

Otherwise ccie prep classes $2-4k, ccie workbooks $hundreds of dollars, so these Cisco CCIE practices labs, practicals are GREAT as far as I am concerned. Its quite possible and probably true that they contain "errors" but us so called CCIE candidates are supposed to be "experts" or are we just looking for something so we can just follow the cookbook and earn the CCIE title.

I for one want to work thru the configurations and figure it out to become a CCIE. Either I have what it takes or not. If I can't figure it out then I don't deserve the title.