<h2>I have been teaching the CCIE Security track since it started and have taught all the versions including the current one, version 6, which I continue to teach.</h2>

<p>Today, I am going to share some of my experiences and insights regarding the evolution of CCIE Security. I believe it will be interesting for Network Engineers to have this background knowledge.</p>

<h3>My Journey with CCIE</h3>

<p>I have been privileged (i.e., am old enough now ;-) ) to have worked and taught in the IT field since the early 1990s. I have seen networks & network security evolve from being a luxury item into a necessity.</p>

<p>In 2003, I passed my CCIE Security exam, which was version 1 at the time. It was predominantly a Routing & Switching exam with a bit of Security added on top. I also passed my CCIE Routing & Switching exam around the same time.</p>

<h4>CCIE Security v1: The Beginning</h4>

<p>At the time of CCIE Security v1, 65% of the 2 exams were almost identical. L2 technologies made up 30% of the exam, which included Ethernet Switches, Frame relay and ATM Switches. IGPs made up another 30%. Believe it or not, 15% of the CCIE Security v1 exam was BGP. Only the last 35% of the exam was the Security part!</p>

<p>The Security portion included basic IPSec/GRE VPNs, PIX Firewall (Basic Initialization), and a section on the Router-based IDS (IOS-IDS).</p>

<p>Right from the start, CISCO made a decision to take an evolutionary path rather than a revolutionary one. This eased engineers into the new field of Network Security rather than forcing the change on them overnight. When I reflect back on it, I think this was a really smart business decision on CISCO's part.</p>

<h4>CCIE Security v2: The Next Phase</h4>

<p>The next phase came with the introduction of additional security devices to the topology. CCIE Security v2 included the Cisco IDS & VPN Concentrator devices. VPN Concentrator was the first device from Cisco that had the Web VPN capability. With this version, you could start to see the shift from Routing & Switching to Security as a standalone stream.</p>

<h4>CCIE Security v3: Introduction of the ASA Firewall</h4>

<p>The next major security device introduced to the CCIE Security exam was the ASA Firewall. This was done in CCIE Security version 3. The ASA has been an integral part of the CCIE Security exam since then.</p>

<h4>CCIE Security v4: Towards a Full-Blown Security Exam</h4>

<p>Version 4, released in 2012, saw the introduction of the ISE, WLC & WSA devices to the exam. CCIE Security v4 was when the exam started to feel like a full-blown Security exam with little or no direct correlation with Routing / Switching. Over the course of 4 evolutions, CISCO had fully established Security as a standalone CCIE track with little overlap with Routing and Switching.</p>

<h4>CCIE Version 5: The Introduction of Firepower Devices</h4>

<p>CCIE Version 5 saw the introduction of the Firepower devices (FTD & NG-IPS). It also saw the inclusion of the ESA device. Although these devices were introduced, the coverage was light. The main firewall being used was still the ASA.</p# I have to use the code tool to format it correctly.
# Continuing from the previous message.
'''
<h4>CCIE Version 6: The Current Version</h4>

<p>CCIE Version 6, the current version which was released in 2020, is similar to version 5 in terms of the devices being tested. ASA was the main firewall in CCIE Security v5. The focus of this exam will be on the FTD as the firewall. The ESA should also see a bigger coverage in this exam. But the main difference, in my opinion, is the introduction of the Design element to the exam. They want you to understand the technologies beyond just configuring the devices. For example, given a customer requirement, you should be able to pick the appropriate technology to fulfill the requirement.</p>

<h3>Understanding Network Security</h3>

<p>In my opinion, network security is not implemented by using one magic device. It is a layered approach to securing your network at different levels for different threats. You need to be able to have perimeter protection using Firewalls (FTD, ASA), you need IPS devices to analyze incoming packets against a database of known network attacks (FTD, NG-IPS), you need to ensure e-mails coming into your network are clean (ESA), you need to verify that the devices that are logging into to internal networks are authorized (ISE), you need to ensure that your internal users are visiting sites that follow the corporate policy (WSA) and that your external communication is protected (VPNs). I personally like and agree with CISCO's decision to focus on Design as it makes learning required to pass the exams more relevant to real-world implementations. After all these certifications are meant to train engineers for everyday problems that they face in their work environments.</p>

<h3>The Current CCIE Security</h3>

<p>The current CCIE Security has been designed to enhance your knowledge on all fronts. It exposes you to various devices and technologies.</p>

<h3>The Benefits of Embarking on the CCIE Security Journey</h3>

<p>Based on my personal experience as well as the combined experience of thousands of students that I have taught, I can assure you that embarking on the CCIE Security journey will make you a better security engineer.</p>

<h3>Got Questions?</h3>

<p>Please feel free to ask any follow-up questions that you may have, I will try to answer them to the best of my knowledge.</p>

<p><strong>Cheers,</strong><br>
Khawar</p>


Do you wanna learn more about CISCO Security history? The background knowledge on the evolution of CCIE Security is both interesting and important for Network Engineers. Learn more by reading this post!

Evolution of CCIE Security

<h1 id="software-defined-networking-a-paradigm-shift">Software Defined Networking: A Paradigm Shift</h1>
<p>The way we have known networking is currently going through a drastic change. The paradigm is shifting quickly and definitely towards Software Defined Networking (SDN). In this post, I am going to share some of my thoughts on SDN and how it differs from legacy networking implementations.</p>
<p>The current networking model, which I will refer to as Legacy Networking is implemented by connecting to individual devices and configuring them. In any corporation with a sizable amount of devices, this requires a lot of resources and time. Which is neither scalable nor cost-effective.</p>
<p>SDN, which entered mainstream networking post 2015, works on the premise of Controller-based Networking where a Central device is responsible for the configuration of the complete network. This key property of SDN makes it more efficient and scalable than a Legacy Network. In the corporation mentioned above, it might have taken a company 15 network engineers to provision, manage and maintain a 100-120 device network, with SDN the same task can be carried out by 5 engineers in a much more efficient and timely manner.</p>
<p>In a SDN network, the Administrator registers the network devices on the controller. This process could be a manual process or automated. Once the device is registered, the configuration and monitoring of the device is done centrally from the controller. Configurations that are common among the network devices could be pushed together with the help of Configuration templates. Changing policies or protocols within the network also become easier and a lot more scalable as you control the changes from the centralized controller. It also helps in provisioning new devices on the network. If a new device comes up in the network, it can easily be provisioned and configured by using the templates.</p>
<p>As the network devices are already registered in the controller, the monitoring and troubleshooting of these devices is also done from a central console. The controller becomes a single pane of management for the entire network.</p>
<p>SDN is implemented using different technologies for different parts of the network. A typical network has three main aspects, the Campus Network, the Wide Area Network (WAN), and the Data Center.</p>
<h2 id="campus-network">Campus Network</h2>
<p>Cisco has a technology implementation that allows you to apply SDN technology to the Campus Network. The technology is called Software Defined Access (SDA). SDA is a technology that uses 3 components to implement SDN for a Campus Network. These components are the Controller called the Digital Network Architecture Center (DNAC). It is an appliance that is responsible for controlling the Campus Network. The second SDA component is the Campus switch. The Campus switches have to be SDA-Aware. There is a range of Catalyst switches that give you that capability. The third SDA component is the authentication server (RADIUS), preferred to be Cisco ISE. The authentication server provides the DNAC the ability to implement Intent-based networking by providing access based on the user/device that is connecting to the network. Imagine a campus with hundreds of switches that need to be provisioned or a policy or configuration change needs to be made to the entire campus network. You can implement such a change by configuring it from the DNAC rather than logging into each Network device and configuring it. SDA also provides the ability to connect to existing Non-SDA networks using L2 Handoff and L3 Handoff capabilities.</p>
<h2 id="wide-area-network">Wide-Area Network</h2>
<p>Cisco has a technology implementation that allows you to apply SDN technology to the Wide-Area Network. The technology is called Software Defined Wide Area Network (SD-WAN). Cisco’s SD-WAN technology was acquired from Viptela, an industry leader at the time, which CISCO bought in 2017. SD-WAN is a technology that uses 2 components to implement SDN for a WAN. These components are the Controllers and the WAN Edges.</p>
<p>Unlike SDA, SD-WAN has 3 controllers. The first controller called the vManage is used for all the configurations. The second controller called the vSmart is responsible for the Control Plane (Routing). The third controller (vBond) is used for authenticating the devices as they connect to the SD-WAN Network. The Network devices connect to the vBond first. Once they are authenticated, it directs them towards the vManage for Management and vSmart for Control Plane. The controllers are Virtual Machines (VMs) and can easily be implemented in the Cloud (AWS, Azure, etc). You could manage your entire WAN by logging into these controllers.</p>
<p>The second SD-WAN component is the WAN Edge. This is the routing device that sits at the edge of each network. WAN Edge is responsible for the Data Plane. All user traffic is transmitted between sites using the WAN Edge. WAN Edges are transport-independent in terms of connecting to each other. They can connect to other WAN Edges or Controllers using a MPLS Connection, Leased-lines, Broadband Connections, or the Cellular network.</p>
<p>Just like SDA, SD-WAN can also implement policy changes throughout the WAN from a central device, the vManage. This provides extreme scalability to the Network Administrator to implement new networks or make changes to existing devices.</p>
<h2 id="data-center">Data Center</h2>
<p>Cisco has a technology implementation that allows you to apply SDN technology to the Data Center as well. The technology is called Application Centric Infrastructure (ACI). ACI is a technology that uses 2 components to implement SDN for a Data Center. These components are the Controllers and the Data Center Switches.</p>
<p>The Controller is called the Application Policy Infrastructure Controller (APIC). It is an appliance that is responsible for controlling the Data Center Network. The second ACI component is the Data Center switch. The Data Center switches have to be ACI-Aware. There is a range of Nexus switches that give you that capability. As was the case with the Campus network, Data Center Network could have a large number of switches. If a new switch needs to be added or a change needs to be provisioned, the APIC allows you to configure it scalably and centrally. ACI also provides the ability to connect to existing Non-ACI networks using L2-OUT and L3-OUT capabilities.</p>
<p>In conclusion, as SDN provides a centralized controller-based management mechanism, it makes your network much more efficient, scalable and nimble versus a Legacy Network.</p>
<p>As an engineer, this would be the right time to get acquainted and start developing expertise in these technologies. Given the cost versus benefit analysis of implementing SDN technologies that I have observed, it is my opinion that over the next few years corporations will largely adopt this approach.</p>
<p>Cheers,
Khawar</p>


The paradigm of networking is shifting quickly and definitely towards Software Defined Networking (SDN). How does SDN differ from legacy networking implementations? Read this post to find out!

Software Defined Networking - The Future of Networking

<h1 id="introduction">Introduction</h1>
<p>In today’s competitive job market, earning a certification that validates your skills and expertise can be a game-changer. Among the numerous networking certifications available, the Cisco Certified Internetwork Expert (CCIE) stands out as one of the most respected and sought-after credentials in the IT industry. In this blog, we will delve into the importance of the CCIE certification and how it can enhance your career prospects.</p>
<p>The CCIE is a prestigious certification offered by Cisco Systems, a leading technology company known for its networking &amp; security solutions. The CCIE is aimed at professionals with significant experience in network engineering, design, and troubleshooting. It validates a candidate’s ability to plan, operate, and troubleshoot complex, converged network infrastructures.</p>
<h2 id="ccie-certification-tracks">CCIE Certification Tracks</h2>
<p>The CCIE certification is available in different tracks, allowing professionals to specialize in a particular domain:</p>
<ul>
<li><strong>CCIE Enterprise Infrastructure</strong></li>
<li><strong>CCIE Enterprise Wireless</strong></li>
<li><strong>CCIE Data Center</strong></li>
<li><strong>CCIE Security</strong></li>
<li><strong>CCIE Service Provider</strong></li>
<li><strong>CCIE Collaboration</strong></li>
</ul>
<p>Each track has its own set of exams, including a written exam and a rigorous, hands-on lab exam to assess the candidate’s practical skills.</p>
<h2 id="importance-of-the-ccie-certification">Importance of the CCIE Certification</h2>
<h3 id="1-recognition-and-credibility">1. Recognition and Credibility</h3>
<p>The CCIE certification is often considered the “Ph.D. of networking” due to its rigorous requirements and comprehensive assessment. As a result, CCIE-certified professionals are highly respected and sought-after in the IT industry. This certification not only validates your skills and knowledge but also serves as a testament to your dedication and commitment to the field.</p>
<h3 id="2-higher-salary-prospects">2. Higher Salary Prospects</h3>
<p>Earning a CCIE certification can significantly impact your earning potential. According to various salary surveys, CCIE-certified professionals often command higher salaries compared to their non-certified peers. This is primarily due to the expertise and skills that come with the certification, which are highly valued by employers.</p>
<h3 id="4-career-advancement">4. Career Advancement</h3>
<p>A CCIE certification can open doors to more challenging and rewarding roles within the IT industry. Employers often prefer to hire or promote individuals with this certification due to the value and credibility it brings. As a CCIE-certified professional, you may have opportunities to work as a network architect, senior network engineer, or even a consultant, depending on your area of specialization.</p>
<h3 id="6-access-to-a-global-network-of-professionals">6. Access to a Global Network of Professionals</h3>
<p>Being a CCIE-certified professional connects you with a global community of like-minded individuals who share the same passion for networking. This network offers the opportunity to learn from the experiences of others, exchange ideas, and stay up-to-date on the latest industry trends.</p>
<h1 id="the-future-of-ccie-certifications-evolving-with-the-networking-landscape">The Future of CCIE Certifications: Evolving with the Networking Landscape</h1>
<p>The Cisco Certified Internetwork Expert (CCIE) certification has long been considered the pinnacle of achievement in the networking industry. As technology evolves and the networking landscape transforms, the CCIE certification must also adapt to remain relevant and valuable. In this blog, we will explore the future of CCIE certifications and how they are evolving to meet the demands of tomorrow’s networking professionals.</p>
<h2 id="the-rise-of-automation-and-programmability">The Rise of Automation and Programmability</h2>
<p>Automation and programmability have become increasingly important in today’s networking world. As a result, the CCIE certification program has started incorporating these concepts into its curriculum. The updated CCIE exam blueprints emphasize the need for professionals to understand and work with network automation tools, APIs, and programmable infrastructure. This shift ensures that CCIE-certified professionals possess the skills necessary to manage and optimize modern, automated networks.</p>
<h2 id="emphasis-on-security">Emphasis on Security</h2>
<p>The increasing prevalence of cyber threats and the growing importance of security have made it essential for networking professionals to be well-versed in security```
best practices. Cisco has acknowledged this by incorporating security topics across all CCIE tracks. Future CCIE certifications will likely continue to emphasize security, ensuring that certified professionals are equipped to design, implement, and manage secure network infrastructures.</p>
<h2 id="integration-of-cloud-technologies">Integration of Cloud Technologies</h2>
<p>As more organizations adopt cloud-based infrastructure and services, networking professionals must be proficient in managing and optimizing these environments. The CCIE certification program has already started integrating cloud technologies into its various tracks, and this trend is expected to continue. Future CCIE certifications will likely cover a broader range of cloud-related topics, such as multi-cloud networking, cloud-native applications, and cloud security.</p>
<h2 id="focus-on-emerging-technologies">Focus on Emerging Technologies</h2>
<p>Emerging technologies, such as the Internet of Things (IoT), artificial intelligence (AI), and machine learning (ML), have the potential to reshape the networking industry. To stay ahead of the curve, the CCIE certification program will need to adapt its curriculum to cover these emerging technologies. As these technologies become more prevalent, future CCIE certifications may introduce specialized tracks or additional modules focused on these areas.</p>
<h2 id="continued-emphasis-on-practical-skills">Continued Emphasis on Practical Skills</h2>
<p>One of the hallmarks of the CCIE certification is its focus on practical, hands-on skills. As networking environments become more complex, the need for professionals with strong problem-solving and troubleshooting abilities will only increase. Future CCIE certifications will likely continue to emphasize practical skills, with lab exams that assess candidates’ abilities to design, implement, and troubleshoot real-world network scenarios.</p>
<h1 id="conclusion">Conclusion</h1>
<p>In a constantly evolving IT landscape, the Cisco CCIE certification remains a valuable credential that distinguishes you as a networking expert. By investing time and effort into earning this prestigious certification, you’ll unlock a world of opportunities and pave the way for a successful career in the networking industry.</p>
<p>The future of CCIE certifications is bright, as they continue to evolve and adapt to the changing networking landscape. By incorporating new technologies, emphasizing security, and maintaining a focus on practical skills, the CCIE certification program ensures that it remains a valuable and relevant credential for networking professionals. As the industry continues to transform, those who hold CCIE certifications will be well-positioned to thrive in the dynamic world of networking.</p>


Are you considering the Cisco Certified Internetwork Expert (CCIE) certification to boost your career? Great news – the CCIE certification is evolving to remain valuable and relevant in the ever-changing networking landscape! 
Here's a sneak peek into the future of #CCIE certification and how it's adapting to meet the demands of tomorrow's networking professionals:

#All Blog Posts