Cisco Secure IDS Exam

[Guest_imported]

Is there anyone out there that has recently taken this exam? I have passed the other 3 for CSS1. I am a little concerned about the IDS one since I've never really had to work with this aspect before. Any pointers????

 

[digic]

I took it a few months ago, and used the Cisco Press book and one of the Boson exams. Be sure to take the exam addressing the Windows-based director (CSPM) - IMO, the UNIX director is going nowhere fast.
I also recommend building out a "FrankenIDS" machine - if you have access to CCO via corporate or personal contracts. Basically, you take a mid-range Intel machine, install Solaris for Intel, configure a regular and promiscuous ethernet NIC, and download the software for the IDS on it. Reference the securityie newsgroup (

http://www.securityie.com/cgi-bin/ultimatebb.cgi?ubb=forum;f=2)

for details. You also need a second Intel machine to install a copy of CSPM on.

 

[Guest_imported]

Thanks Digic! Do you know the main difference between the 2 ids exams other than the Policy Manager?

 

[digic]

No - I wouldn't know in detail. I do know that the UNIX Director track had a separate Cisco Press book, separate class available (being retired, I believe) and that Boson had test tracks for both. From other newsfeeds, folks tended to favor the CSPM approach, and also recommended Carter's Cisco Press book over the other one. HTH!

 

[Guest_imported]

Thanks digic! I took my IDS exam this morning and passed it. I am now a CSS1.