Those certs might demonstrate your ability to setup cisco products but it won't show you know anything about security.

So you may be krad enough to get pix to fw1 ipsec tunnels working. You may even know how to apply 1918 ACL's and disable small services.

But until you stop leaving your tftp server open for me to download all your configs and crack all your weak non-secure-password-policy protected passwords it wont matter how nice your network looks in viso.

Fact: Most CCIE's still use telnet
Fact: A CCIE/CISSP would not

--Aaron Higbee




>I wouldn't even bother with CISSP since this is the case. >I rather go after Cisco's Security Specialist 1 track. >Which is what I'm pursing at the moment.

>Though, as the need for true talent being tested, as >expressed in this article, there is no better candidate >than Cisco's CCIE-Security which requires you you actually >secure a network using the PIX firewall, their IDS, and >using VPN's. There is a reason that anyone who actually >has a CCIE-Security is recognized as one of the best in >the industry.
>
>teLi, CCNP

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/67/11150#11150