Have you ever searched through Cisco Documentation looking for port numbers so that you could write an access-list?  Well if you are studying for the CCIE you probably have, especially since our good friend Google is not allowed within the confines of the lab exam.  In the past I have followed the advice of Brian [...]

So a week ago I went to the IPexpert CCIE Security 5-day bootcamp in Columbus, Oh. My review can be found here. Around the same time my blog was chosen as the Featured CCIE>Blog_ of the Month. What an honor!  What makes it even better is that as the featured blog I have an oportunity [...]

According to learning@cisco the updated version of the CCIE Security Lab Exam will be made available April 20, 2009. As previously announced, Cisco has refreshed the exam with the latest Cisco equipment and software to mirror the job knowledge and skills needed by security professionals. In other words, they updated it to meet current vode [...]

Well as began typing this I was sitting in the Columbus, Ohio Airport.  I was feeling a little brain dead after this week but not enough that I don’t have all the details of my class in mind.  This was actually a last minute class.  I was scheduled for sometime in March, the same week [...]

You probably know this already but believe it or not…my wife showed me this morning how to take screen shots with the iphone.  Siimple press the home and power button at the same time.  The screen will flash and you are good to go…

Just a quick update on my status. I have 67 days until my lab. I’m sitting in an IPexpert classroom right now with Jared Scrivener as my instructor and they are totally proving to be experts. I will post my experience after the class. Well time to learn again!

It is possible to configure a L2L session on a VPN3k using CLI only.  It is a completley different configuration.  Here is the summation of it: Create an SA Create inbound and Outbound rules for the hosts to be encrypted. Apply the rules to the public filter with the action of “Apply IPSec” and attach [...]

Tonight I worked on the ASA Per-flow policing.  The configuration is fairly straight forward.  After ensuring that the VPN works create a class-map to match the tunnel-group and the destination-address like so: class-map vpn_data match flow ip destination-address match tunnel-group ezvpn Next create the policy map to police based on the class we just created: [...]

Not a bad lab night.  I only did 2 sections of lab 1, so I am going to continue this post later.  The one thing that was good to be reminded of has to do with Reflexive ACLs. TIP: When testing Reflixive ACLs the /source-interface option does not cause the ACL to evaluate.  To test [...]

Has anyone done IE volume 1 page 532? It’s ASA SSL vpn with the SVC. I have used sslclient-win-1.0.0.179.pkg, sslclient-win-1.0.2.127.pkg, and sslclient-win-1.1.3.173.pkg and each of them fail. using 1.0.0.179 the browser dies when it tried to download. Using the other two I just get an error pop-up that it failed. See the image below. Any [...]