in
IEOC CCIE Forums

IEOC - INE's Online Community

Welcome to INE's Online Community - IEOC - a place for CCIE and CCENT candidates to connect, share, and learn. Our Online Community features CCIE forums and discussions for all tracks including Routing & Switching, Voice, Security, Service Provider, Wireless,, and Storage. Through these online communities you can discuss your questions with thousands of your peers, hundreds of CCIE's and INE's own team of world renowned CCIE instructors and authors, Brian Dennis - Quintuple CCIE #2210, Brian McGahan – Triple CCIE #8593, Petr Lapukhov - Quad CCIE #16379, and Mark Snow - Dual CCIE #14073.

Browse Forum Posts by Tags

Showing related tags and posts for the CCIE Security Technical forum. See all tags in the site
  • Re: CCIE SEC practical lab

    Hi, The small labs are good for your hands-on on the separate topics. But the small labs will take you maximum a few hours? In the end you will have to sit for a whole day doing several tasks which are related to each other. In the full labs you will have to configure some feature and make sure the necessary...
    Posted to CCIE Security Technical (Forum) by Jacko on 09-30-2015
  • ASA PKI CA and IPSEC VPN

    Hi All, I have an ASA which terminates IPSEC VPN’s from both internal/private networks and from Public/3rd Party networks at the Edge. Can an ASA5500x running IOS9.3.x register (trust points / enrolments) with multiple CA’s ? (Private and Public) For example could I , on one side have an...
    Posted to CCIE Security Technical (Forum) by clester on 08-29-2015
  • IOS ZBPFW

    Hi All, When configuring an ASR1001 with ZBPFW, and when using a class class-default / drop log, for an OUTSIDE_TO_SELF zone (basically the outside interface ip address), I do not see the drop action log for any dropped packets, but the drop counter is actualy incrementing. I know the counter is incrementing...
    Posted to CCIE Security Technical (Forum) by clester on 08-29-2015
  • IOS ZBPFW Parameter-maps

    Hi All. I have an ASR1001 where each interface in part of a VRF for services segregation. When implementing a ZBPF policy, specifically a Parameter-map type, i noticed there can be a number of inspect flavours. type inspect / inspect-global / inspect-vrf / inspect-zone.. Is there any reason/benefit to...
    Posted to CCIE Security Technical (Forum) by clester on 08-29-2015
  • WSA cloud connector mode

    Has anyone had the opportunity to place 2 WSA appliances with wccp placed on a 2 x 6509 running 15.1x code? For some reason or another this code doesn't support return gre with the WSAs if the appliance is not attached to that chassis. I assume because it wants to run everything in layer2 redirect...
    Posted to CCIE Security Technical (Forum) by jbabio on 05-31-2015
  • Building CCIE Security lab

    Building the lab is quite expensive, so I am wondering if any of you could share your experiences of how you built your lab. Did you buy all the equipment or was it sufficient buying a few bits and pieces? I have been looking at this site which sells lab solutions...has anyone had any experience with...
    Posted to CCIE Security Technical (Forum) by mag03 on 06-21-2014
  • Ironport Email security Appliance for CCIE security

    I am looking to build a CCIE security lab and am wondering if the Ironport C160 Email Security appliance is sufficient for the CCIE security 4.0 lab? If not which appliance should I be looking at. Thanks in advance
    Posted to CCIE Security Technical (Forum) by mag03 on 06-21-2014
  • Re: Anyconnect with SCEP auto-enrollment

    Hi, It means that the authentication is gonna be made using 2 authentication factor such as a username and a certificate (pki), in this case this is done to improve security. Whenever you configure a tunnel group you can use a 2 authentication factor such as AAA (LDAP, Radius and tacacs) and certificates...
    Posted to CCIE Security Technical (Forum) by auranprost on 05-01-2014
  • Anyconnect with SCEP auto-enrollment

    Hi Guys, I have been trying to configure any connect dual authentication factor with SCEP auto-enrollment. I was successful in configuring everything, including the LDAP-Map group redirection with both group-policies using simultaneous login 0 and the mapped with 3 simultaneous logins. Everything happens...
    Posted to CCIE Security Technical (Forum) by auranprost on 04-26-2014
  • CCIE Security v4 ATC Continues This Week

    INE’s new CCIE Security V4 Advanced Technologies Class continues this week, with a focus on ASA Firewall. This week’s classes will run Wednesday Oct 9th – Friday Oct 11th at 10:00 PDT (17:00 GMT) daily, with class days running typically about 4 hours each. Anyone with an active All...
    Posted to CCIE Security Technical (Forum) by joldow on 10-08-2013
Page 1 of 3 (30 items) 1 2 3 Next >
IEOC CCIE Forums Internetwork Expert CCIE Training
About IEOC | Terms of Use | RSS | Privacy Policy
© 2010 Internetwork Expert, Inc. All Rights Reserved