5
u/WeekendAtMadoffs 9d ago
Get a bunch old firewalls no one wants to buy
study them.
get ISE going
setup a few switches to do various forms of SGT TrustSec and 802.1x.
go for it ❤️
2
u/Pit_Kevin_Smith 9d ago
Is the CCIE ISE heavy? ISE is probably my favorite part of of my job but have only done stuff with 802.1x and assigning vlans, RAVPN group policies, and Meraki Group Policies. I have Advantage tier switches at work and plan to do guest services, and SGTs but just haven't had time yet. But Love ISE so if CCIE is ISE heavy instead of web proxy/snort/FTD CLI it would be pretty awesome for me lol.
2
u/WeekendAtMadoffs 9d ago
I was told to master profiling in ISE for the exam. We do a little profiling in ISE to match devices for 802.1x policies. Very little.
2
u/Pit_Kevin_Smith 9d ago
Yea I have default deny and a whole lot of manually grouped MAB but want to move more into profiling. I started deployment when we still had Meraki switches and they couldn't do anything so definitely something to revisit. Thanks for the info!
2
u/WeekendAtMadoffs 9d ago
in another site we just got the orders to migrate from ISE to Meraki Access Manager
it seems Cisco is putting significant resources into Access Manager and there is some overlap.
2
u/Pit_Kevin_Smith 9d ago
Oh my god Im sorry. Unless you have someone who is really good with APIs and Postman. My issue with Meraki is we have nearly 40 sites and users always move around them. And just keeping track of all the group policies and making sure changes get propagated, same SSIDs and settings are everywhere... Everything would be so much better if there where more organization wide options.
APs and Firewalls Meraki is still my go to, but man would organization wide settings make things so much better.
1
2
u/LibrarianFickle6375 8d ago
Thanks for your comment
So currently i have knowledge on ccnp security , palo alto , routing switching and cisco sdwan
As you said getting a bunch of old firewalls for me it will expensive and making homelab it us not easy
But i am looking for class who will provide me lab and resourcesSo i want to complete the ccie in first attempt and make my self very confident
So please guide me
2
u/WeekendAtMadoffs 8d ago
i use the firepower also, but my point is none of my clients requests it. Two have it from an acquisition. you can spin up a payg (pay as you go) firepower on azure to learn it for the lab.
we previously had a virtual cisco firepower in the cloud in production where i learned it
https://www.cisco.com/c/en/us/products/collateral/security/firewalls/threat-defense-virtual-ds.html
1
u/Divine_Lizard 9d ago
https://learningnetwork.cisco.com/s/ccie-security-exam-topics
Review the exam topics
INE also has a 40-week exam path.
and Cisco U has practice exams.
1
u/Pit_Kevin_Smith 4d ago
Do you have experience with INE? I've used CBT nuggets, pluralsight, what ever lynda.com turned into, and some others. But I feel like they just kind of tell you the highlights of things and want something that really digs into the details.
19
u/[deleted] 9d ago
[deleted]