CCIE Security Lab (v6.1)
A full, on-demand lab track built directly around the Cisco CCIE Security (v6.1) lab blueprint, covering perimeter security and intrusion prevention, secure connectivity and segmentation, security infrastructure hardening, identity management and access control, and advanced threat protection and content security. Designed for CCIE Security candidates who want a single, guided path built on real console-accessed devices.
Register Your InterestCourse Highlights
Perimeter Security
Build and verify firewall policies, NGFW/NGIPS deployments, traffic controls, high availability, and attack mitigation across Cisco ASA, FTD, and FMC.
Secure Connectivity
Practice remote-access and site-to-site VPNs, FlexVPN, DMVPN, IPsec, infrastructure segmentation, and Cisco TrustSec microsegmentation.
Infrastructure Hardening
Apply control-plane, management-plane, data-plane, Layer 2, and wireless security controls, along with monitoring and security design frameworks.
Identity & Access Control
Configure Cisco ISE-based AAA, 802.1X, MAB, guest and BYOD flows, posture, profiling, certificates, external identity sources, and access policies.
Threat & Content Security
Work with malware response, packet analysis, Umbrella, web and email security, HTTP inspection, and integrated threat protection solutions.
Real Device Practice
Build, configure, and verify each topic through hands-on work with real, console-accessed lab devices rather than passive demonstrations.
A Guided Path Through the CCIE Security Blueprint
The planned CCIE Security track is designed to bring the full scope of the v6.1 lab blueprint into one structured, hands-on learning path. It spans perimeter firewalls and intrusion prevention, encrypted connectivity, network infrastructure protection, identity-based access control, and advanced threat and content security.
Each module is intended to be completed directly in the lab environment, giving candidates practical experience configuring and verifying the technologies covered by the exam.
- Blueprint-Aligned Coverage: Follow the five subject areas listed for the CCIE Security v6.1 lab exam.
- Hands-On Configuration: Build, configure, and verify security features on console-accessed lab devices.
- One Structured Track: Work through a guided path spanning perimeter security, VPNs, infrastructure security, identity, and threat protection.
Technologies Covered
- ✓Cisco ASA, Cisco FTD, Cisco FMC, NGFW, and NGIPS
- ✓Firewall policies, NAT, application inspection, clustering, and high availability
- ✓AnyConnect, FlexVPN, DMVPN, IPsec, GRE, VLAN, PVLAN, and VRF-Lite
- ✓Cisco TrustSec, SGT, SXP, infrastructure ACLs, CoPP, uRPF, and RTBH
- ✓Layer 2 and wireless security, including DAI, DHCP snooping, RA Guard, WPA2, and WPA3
- ✓NetFlow, IPFIX, NSEL, SNMP, syslog, RMON, and eStreamer
- ✓Cisco ISE, AAA, 802.1X, MAB, BYOD, guest access, posture, and endpoint profiling
- ✓LDAP, Active Directory, RADIUS, certificates, EAP chaining, TEAP, and MAR
- ✓Cisco Duo, pxGrid, Cisco WSA, Cisco ESA, and Cisco SMA
- ✓Cisco AMP, Cisco Umbrella, CASB, DLP, RBI, and web/email security
- ✓Wireshark, tcpdump, SPAN, RSPAN, and ERSPAN
- ✓Python REST APIs, JSON/XML/YAML, Cisco DNA Center APIs, and threat solution integrations
Modules & Topics
Every module is planned as hands-on practice. Expand a section to review the topics covered in the CCIE Security v6.1 lab track.
- Deployment modes on Cisco ASA and Cisco FTD, including routed, transparent, single, multi-context, and multi-instance
- Firewall features on Cisco ASA and FTD, including NAT, application inspection, traffic zones, policy-based routing, traffic redirection to service modules, and identity firewall
- Security features on Cisco IOS/IOS XE, including application awareness, zone-based firewall, and NAT
- Cisco FMC features, including alerting, logging, reporting, and dynamic objects
- Cisco NGIPS deployment modes, including in-line, passive, and TAP
- Cisco NGFW features, including SSL inspection, user identity, geolocation, and Application Visibility and Control
- Detecting and mitigating common attack types, including DoS/DDoS, evasion techniques, spoofing, man-in-the-middle, and botnet activity
- Clustering and high availability on Cisco ASA and Cisco FTD
- Traffic control policies and rules on Cisco ASA and Cisco FTD
- Routing protocol security on Cisco IOS, Cisco ASA, and Cisco FTD
- Network connectivity through Cisco ASA and Cisco FTD
- Correlation and remediation rules on Cisco FMC
- Cisco AnyConnect client-based remote-access VPN on Cisco ASA, Cisco FTD, and Cisco routers
- Cisco IOS CA for VPN authentication
- FlexVPN, DMVPN, and IPsec site-to-site (L2L) tunnels
- VPN high availability, including Cisco ASA VPN clustering and dual-hub DMVPN deployments
- Infrastructure segmentation methods, including VLAN, PVLAN, GRE, and VRF-Lite
- Microsegmentation with Cisco TrustSec using SGT and SXP
- Device hardening and control plane protection, including CoPP, IP source routing, and infrastructure ACLs
- Management plane protection, including CPU and memory thresholding and securing device access
- Data plane protection, including uRPF, QoS, and remotely triggered black hole (RTBH) filtering
- Layer 2 security techniques, including DAI, IP Device Tracking, STP security, port security, DHCP snooping, RA Guard, and VACLs
- Wireless security technologies, including WPA, WPA2, WPA3, TKIP, and AES
- Monitoring protocols, including NetFlow/IPFIX/NSEL, SNMP, syslog, RMON, and eStreamer
- Security alignment with organizational policy frameworks, including ISO 27001, RFC 2827, and PCI-DSS
- Cisco SAFE model for validating network security design and identifying threats
- Interacting with network devices through APIs using Python, including REST API requests and JSON/XML/YAML data encoding
- Cisco DNA Center northbound API use cases, including authentication, network discovery, network device, and network host
- Cisco ISE scalability using multiple nodes and personas
- Network access AAA with Cisco ISE across Cisco switches and Wireless LAN Controllers
- Administrative access to Cisco devices with Cisco ISE
- AAA for network access with 802.1X and MAB using Cisco ISE
- Guest lifecycle management using Cisco ISE and Cisco WLC
- BYOD onboarding and network access flows
- Cisco ISE integration with external identity sources, including LDAP, Active Directory, and external RADIUS
- Provisioning Cisco AnyConnect with Cisco ISE and Cisco ASA
- Posture assessment with Cisco ISE
- Endpoint profiling using Cisco ISE and the Cisco network infrastructure, including device sensor
- MDM integration with Cisco ISE
- Certificate-based authentication using Cisco ISE
- Authentication methods, including EAP chaining, TEAP, and MAR
- Identity mapping across Cisco ASA, Cisco ISE, Cisco WSA, and Cisco FTD
- pxGrid integration between Cisco WSA, Cisco ISE, and Cisco FMC
- Cisco ISE integration with multifactor authentication
- Access control and single sign-on using Cisco Duo
- Cisco IBNS 2.0 (C3PL) for authentication, access control, and user policy enforcement
- Cisco AMP for networks, endpoints, and content security (Cisco ESA and Cisco WSA)
- Detecting, analyzing, and mitigating malware incidents
- Packet capture and analysis using Wireshark, tcpdump, SPAN, ERSPAN, and RSPAN
- Cloud security with Cisco Umbrella, including DNS proxy, DNS security policies, RBI, CASB, and DLP policies
- Web filtering, user identification, and Application Visibility and Control on Cisco FTD and Cisco WSA
- WCCP redirection on Cisco devices
- Email security features, including mail policies, DLP, quarantine, authentication, and encryption
- HTTP decryption and inspection on Cisco FTD, Cisco WSA, and Cisco Umbrella
- Cisco SMA for centralized content security management
- Cisco advanced threat solution integration, including Stealthwatch, FMC, AMP, Cisco Threat Response, and Umbrella
CCIE Security Lab — Coming Soon
Be Notified When the Lab Is Ready
We do not have a confirmed launch date yet. Register your interest and we will notify you as soon as the CCIE Security track becomes available.
Register Your Interest