pix firewall(CCSP)

[jeffreybisko]

i am an mcse and ccna. now i would like to continue on in the cisco world and have learned of the new CCSP cert. i was going to construct a home lab and was wondering what would be good to purchase. i would ultimately like to have 2 routers, a pix firewall and maybe throw in a switch. does this sound good, bad, or what? looking for ideas about the network and specifics on hardware.

 

[yizhar]

HI.

That's good.

Here are some notes:

The routers should be full featured with IOS firewall (CBAC) and IPSec encryption (VPN) options.

You should also have 2 PC or more, I guess that's not a problem.

You'll also need some software like CSACS and CSPM - for lab you may use either trial versions or the full product if you can get it.

The pix can be a 501 for most of the practice, if you can get a 515 with 3 interfaces it is better of course but costly.
Using 2 pix firewalls is better for establishing site to site VPN.

CCSP is about 4 Cisco products:
* IOS routers (with CBAC, VPN) + CSACS software.
* Pix firewall.
* Cisco VPN 3xxx devices + Cisco VPN client software.
* Cisco IDS 4xxx devices + CSPM software.
The last 2 are expensive and not easy to get so you will probably be able to practice hands-on only at some other place.
If you're going for a class course, ask them for additional hands-on practice at their site.
If you're going by yourself, ask your Cisco dealer, if they "know" you, maybe you'll be able to arrange some lab time at their lab.

If you're learning by yourself, you can also consider going half the way for the CSPFA and MCNS exams (pix and routers only) without the VPN and IDS+CSPM products as a start.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar